t_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000200, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:00:16 executing program 3: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x0) pipe(0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece400ea, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) syz_open_procfs(0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) getgid() setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pipe(&(0x7f0000000300)) [ 428.669382][T15998] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 428.703263][T16000] overlayfs: failed to resolve './file': -2 06:00:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r4, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB="000000000400000008000a00", @ANYRES32=r4, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r4, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:16 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{0x0}], 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='auxv\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') dup3(r0, r1, 0x0) sendfile(r1, r2, 0x0, 0x1) 06:00:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 429.202820][T16018] device bridge27 entered promiscuous mode [ 429.307375][T16027] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:17 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ocfs2_control\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc0506107, 0x0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e20, 0x8, @loopback, 0x4}, {0xa, 0x4e22, 0x0, @loopback}, 0x7, [0x6, 0x4, 0xffff0d2b, 0x80000000, 0x8a13, 0x0, 0xb41]}, 0x5c) 06:00:17 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000180)=0x8) [ 429.425344][T16027] device bridge27 left promiscuous mode [ 429.502884][T16038] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 06:00:17 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{0x0}], 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:17 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa24847947") ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000001400)}, {&(0x7f0000000340)="3e55e72cfbe59bc199a98dc111a7069644ba2c56324883e86afd872e9904602fdd2b9d5c9e472f343e1990c03f8177563fdd6230dddc195af4707e1549d5a0d62c0cfb859ee44676e1f733dfa844edf195142d104489ab00c39a34db20014bdc10c47541f4e7", 0x66}], 0x2) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x0, {0xb, @pix={0x600, 0x1f}}}) 06:00:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, 0x0) [ 429.961758][T16057] QAT: Invalid ioctl 06:00:18 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{0x0}], 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:18 executing program 3: symlink(&(0x7f0000000000)='./file0\x00', 0x0) 06:00:18 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa24847947") ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000001400)}, {&(0x7f0000000340)="3e55e72cfbe59bc199a98dc111a7069644ba2c56324883e86afd872e9904602fdd2b9d5c9e472f343e1990c03f8177563fdd6230dddc195af4707e1549d5a0d62c0cfb859ee44676e1f733dfa844edf195142d104489ab00c39a34db20014bdc10c47541f4e7", 0x66}], 0x2) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x0, {0xb, @pix={0x600, 0x1f}}}) 06:00:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r4, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB="000000000400000008000a00", @ANYRES32=r4, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r4, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:18 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa24847947") ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000001400)}, {&(0x7f0000000340)="3e55e72cfbe59bc199a98dc111a7069644ba2c56324883e86afd872e9904602fdd2b9d5c9e472f343e1990c03f8177563fdd6230dddc195af4707e1549d5a0d62c0cfb859ee44676e1f733dfa844edf195142d104489ab00c39a34db20014bdc10c47541f4e7", 0x66}], 0x2) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x0, {0xb, @pix={0x600, 0x1f}}}) 06:00:18 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f0000000000)='./file0\x00', 0x0) 06:00:18 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0x2) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r1) 06:00:18 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000)="14885eed546ff69928d88019da678265cb928c68bd832286b357666a2952d944db180c081c894742f06f015d761e417a3fe9e66a1d", 0xfffffffffffffd82, 0x8a0, 0x0, 0xffffffffffffffbf) [ 430.517907][T16077] device bridge28 entered promiscuous mode 06:00:18 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(0x0, 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{0x0}], 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 430.595834][T16077] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 430.745126][T16077] device bridge28 left promiscuous mode 06:00:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000000006061ae6e00142100a7ce13a8b1ac8b9a0dc50496f8f8f557ff02000000000000000000000000000100000000340335e72f049de7ebf7fdec677fb7dc4e0c016240c6d220592889b3d4c1cf1ca3772eff5c7360d63f9590ba06ad52fb00000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x46) 06:00:18 executing program 0: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x100, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x3, 0x0, 0x4, 0x80000, 0x0, {0x77359400}, {0x3, 0x8, 0x0, 0x89, 0x1f, 0x7f, "d620333f"}, 0x200, 0x0, @offset=0x8, 0x8}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20020059, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x80, 0x80000) bind(0xffffffffffffffff, &(0x7f0000000100)=@xdp, 0xfffffe3d) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000340)={0x0, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) dup3(r4, r5, 0x0) dup2(r2, r6) 06:00:19 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(0x0, 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{0x0}], 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r4, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB="000000000400000008000a00", @ANYRES32=r4, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r4, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:19 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(0x0, 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{0x0}], 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x4, 0x4, 0x408, 0x1f0, 0x0, 0x0, 0x320, 0x320, 0x320, 0x7fffffe, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70], 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@multicast1, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ded399dfb8689fadb89c46aa134d51b61a5486ecb1b511314f36371b81498e3d1c89bc66324b1873dd6a5085805b0028c79f5388bc5a0d66df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x458) 06:00:19 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:19 executing program 2: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x100, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x3, 0x0, 0x4, 0x80000, 0x0, {0x77359400}, {0x3, 0x8, 0x0, 0x89, 0x1f, 0x7f, "d620333f"}, 0x200, 0x0, @offset=0x8, 0x8}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20020059, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x80, 0x80000) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) dup3(r4, r5, 0x0) dup2(r2, r6) 06:00:20 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{0x0}], 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0x2) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r1) [ 432.279525][T16120] device bridge29 entered promiscuous mode [ 432.319557][T16124] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 432.343703][T16124] device bridge29 left promiscuous mode 06:00:20 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) fcntl$getownex(r0, 0x11, &(0x7f0000000100)) 06:00:20 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{0x0}], 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x220000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r2, &(0x7f00000001c0)='T', 0x1, 0x0) write$cgroup_int(r2, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180), 0xff7e) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, 0xffffffffffffffff, 0x0, 0x8, 0x1800}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="000028bd7020ffdbdf250800000010000100ffffffff"], 0x3}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000014) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r5, 0x400000001ffffffd) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = dup3(r7, r8, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) dup3(r6, r9, 0x0) r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r10, 0xc0e85667, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x1c) ioctl$SCSI_IOCTL_START_UNIT(r7, 0x5) 06:00:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:20 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 433.004845][T16166] device bridge30 entered promiscuous mode [ 433.063847][T16169] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 433.131333][T16169] device bridge30 left promiscuous mode 06:00:21 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x53, 0xfa00, {{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}}, 0xfd24) 06:00:21 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{0x0}], 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)=ANY=[@ANYBLOB="020e000014000000000000000000000005000600000000000a00000000000000000000000100000001000000000000000000000000000000080012000000020000000000000000001f000000000000000000000000000000ac14ffbb000000000000000000000000ac14140000000000000000000000000005000500000000000a00000000000000fe800b8909aa2edde06d0000000000ff0000000000000000"], 0xa0}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 433.338492][T16176] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 433.380916][T16176] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 06:00:21 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:21 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000100)={{}, {0x0, r0/1000+30000}}, 0x0) 06:00:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:21 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(0x0, 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{0x0}], 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000240)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 434.022190][T16176] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 434.071472][T16176] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 434.136210][T16213] device bridge31 entered promiscuous mode 06:00:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x220000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r2, &(0x7f00000001c0)='T', 0x1, 0x0) write$cgroup_int(r2, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180), 0xff7e) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, 0xffffffffffffffff, 0x0, 0x8, 0x1800}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="000028bd7020ffdbdf250800000010000100ffffffff"], 0x3}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000014) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r5, 0x400000001ffffffd) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = dup3(r7, r8, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) dup3(r6, r9, 0x0) r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r10, 0xc0e85667, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x1c) ioctl$SCSI_IOCTL_START_UNIT(r7, 0x5) [ 434.179358][T16215] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 434.249696][T16215] device bridge31 left promiscuous mode 06:00:22 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:22 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r4 = socket(0x1000000010, 0x80003, 0x0) sendmmsg$alg(r4, &(0x7f0000000100), 0x492492492492711, 0x0) [ 434.760388][T16221] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 06:00:22 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(0x0, 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{0x0}], 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 434.812120][T16221] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 06:00:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000250007d0b3b443050000000000000000", @ANYRES32=r1], 0x2}}, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 06:00:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getflags(r0, 0x1) 06:00:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r2, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, r2, 0x0, 0x8, 0x1800}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x4000014) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x400000001ffffffd) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = dup3(r5, r6, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) dup3(r4, r7, 0x0) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r8, 0xc0e85667, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) [ 435.217555][T16249] device bridge32 entered promiscuous mode [ 435.255883][T16253] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000250007d0b3b443050000000000000000", @ANYRES32=r1], 0x2}}, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 06:00:23 executing program 0: r0 = gettid() perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7, 0x11c9, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x16, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r1) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000f1000000000000000000f100850000002c"], 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) close(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x100000039, &(0x7f0000000000)=[{&(0x7f0000000380)=""/110, 0xffffffd9}], 0x1, 0x0, 0x4a, 0x59}, 0x8) 06:00:23 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(0x0, 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{0x0}], 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:23 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 435.664440][T16253] device bridge32 left promiscuous mode 06:00:24 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000250007d0b3b443050000000000000000", @ANYRES32=r1], 0x2}}, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 06:00:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 436.457767][T16286] device bridge33 entered promiscuous mode [ 436.478248][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 436.478266][ T26] audit: type=1804 audit(1582005624.437:195): pid=16283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/247/bus/file0" dev="overlay" ino=16737 res=1 [ 436.556408][T16286] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:24 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x5) ioctl$TIOCSRS485(r0, 0x542f, 0x0) [ 436.702511][T16286] device bridge33 left promiscuous mode 06:00:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r2, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, r2, 0x0, 0x8, 0x1800}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x4000014) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x400000001ffffffd) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = dup3(r5, r6, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) dup3(r4, r7, 0x0) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r8, 0xc0e85667, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) 06:00:24 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) [ 436.968021][ T26] audit: type=1804 audit(1582005624.927:196): pid=16303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/248/bus/file0" dev="overlay" ino=16612 res=1 06:00:25 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 437.249231][T16296] mkiss: ax0: crc mode is auto. 06:00:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000250007d0b3b443050000000000000000", @ANYRES32=r1], 0x2}}, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) [ 437.362064][ T26] audit: type=1804 audit(1582005625.317:197): pid=16312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/249/bus/file0" dev="overlay" ino=16580 res=1 06:00:25 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:25 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) [ 437.859649][T16325] device bridge34 entered promiscuous mode 06:00:25 executing program 2: [ 437.972254][T16330] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r2, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, r2, 0x0, 0x8, 0x1800}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x4000014) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x400000001ffffffd) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = dup3(r5, r6, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) dup3(r4, r7, 0x0) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r8, 0xc0e85667, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) [ 438.156421][ T26] audit: type=1804 audit(1582005626.117:198): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/250/bus/file0" dev="overlay" ino=16722 res=1 06:00:26 executing program 2: 06:00:26 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 438.308051][T16330] device bridge34 left promiscuous mode [ 438.755600][ T26] audit: type=1804 audit(1582005626.717:199): pid=16355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/251/bus/file0" dev="overlay" ino=16545 res=1 06:00:26 executing program 0: 06:00:26 executing program 2: 06:00:26 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) 06:00:26 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:27 executing program 2: 06:00:27 executing program 0: [ 439.238025][T16368] device bridge35 entered promiscuous mode 06:00:27 executing program 2: [ 439.306575][T16368] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r2, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, r2, 0x0, 0x8, 0x1800}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x4000014) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x400000001ffffffd) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = dup3(r5, r6, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) dup3(r4, r7, 0x0) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r8, 0xc0e85667, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) 06:00:27 executing program 0: [ 439.485900][T16368] device bridge35 left promiscuous mode 06:00:27 executing program 2: 06:00:27 executing program 2: 06:00:27 executing program 0: [ 439.873230][ T26] audit: type=1804 audit(1582005627.827:200): pid=16387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/252/bus/file0" dev="overlay" ino=16708 res=1 06:00:28 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:28 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:28 executing program 2: 06:00:28 executing program 0: 06:00:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:28 executing program 3: 06:00:28 executing program 2: 06:00:28 executing program 0: [ 440.616769][ T26] audit: type=1804 audit(1582005628.577:201): pid=16405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/253/bus/file0" dev="overlay" ino=16533 res=1 [ 440.675799][T16406] device bridge36 entered promiscuous mode 06:00:28 executing program 3: [ 440.725198][T16410] bridge36: port 1(bridge_slave_0) entered blocking state [ 440.750720][T16410] bridge36: port 1(bridge_slave_0) entered disabled state 06:00:28 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:28 executing program 2: 06:00:28 executing program 0: [ 440.864436][T16410] device bridge_slave_0 entered promiscuous mode [ 440.900795][T16410] bridge36: port 1(bridge_slave_0) entered blocking state [ 440.908117][T16410] bridge36: port 1(bridge_slave_0) entered forwarding state 06:00:29 executing program 3: [ 441.319975][ T26] audit: type=1804 audit(1582005629.277:202): pid=16432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/254/bus/file0" dev="overlay" ino=16593 res=1 06:00:29 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:29 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:29 executing program 0: 06:00:29 executing program 2: 06:00:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:29 executing program 3: 06:00:29 executing program 3: 06:00:29 executing program 2: 06:00:29 executing program 0: [ 441.586734][T16448] device bridge37 entered promiscuous mode [ 441.673324][T16451] device bridge_slave_0 left promiscuous mode [ 441.714602][T16451] bridge36: port 1(bridge_slave_0) entered disabled state 06:00:29 executing program 3: 06:00:29 executing program 0: 06:00:29 executing program 2: [ 441.864560][T16451] bridge37: port 1(bridge_slave_0) entered blocking state [ 441.871800][ T26] audit: type=1804 audit(1582005629.827:203): pid=16462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/255/bus/file0" dev="overlay" ino=16517 res=1 [ 441.945985][T16451] bridge37: port 1(bridge_slave_0) entered disabled state [ 442.002782][T16451] device bridge_slave_0 entered promiscuous mode [ 442.063404][T16451] bridge37: port 1(bridge_slave_0) entered blocking state [ 442.070654][T16451] bridge37: port 1(bridge_slave_0) entered forwarding state 06:00:30 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:30 executing program 3: 06:00:30 executing program 0: 06:00:30 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:30 executing program 2: 06:00:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:30 executing program 0: 06:00:30 executing program 2: [ 442.422812][T16482] device bridge38 entered promiscuous mode [ 442.466216][T16482] device bridge_slave_0 left promiscuous mode 06:00:30 executing program 3: [ 442.496782][ T26] audit: type=1804 audit(1582005630.457:204): pid=16483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/256/bus/file0" dev="overlay" ino=16488 res=1 [ 442.544573][T16482] bridge37: port 1(bridge_slave_0) entered disabled state 06:00:30 executing program 0: 06:00:30 executing program 2: 06:00:30 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 442.726410][T16482] bridge38: port 1(bridge_slave_0) entered blocking state [ 442.770064][T16482] bridge38: port 1(bridge_slave_0) entered disabled state [ 442.870462][T16482] device bridge_slave_0 entered promiscuous mode [ 442.951244][T16482] bridge38: port 1(bridge_slave_0) entered blocking state [ 442.958519][T16482] bridge38: port 1(bridge_slave_0) entered forwarding state 06:00:31 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:31 executing program 3: 06:00:31 executing program 2: 06:00:31 executing program 0: [ 443.062925][ T26] audit: type=1804 audit(1582005631.017:205): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/257/bus/file0" dev="overlay" ino=16611 res=1 06:00:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 443.217866][T16515] device bridge39 entered promiscuous mode 06:00:31 executing program 2: 06:00:31 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/crypto\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) [ 443.260959][T16515] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:31 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000000380)=[{&(0x7f00000025c0)=""/4098, 0x1002}], 0x1, 0x2) [ 443.363458][T16515] device bridge39 left promiscuous mode 06:00:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000008380)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000002004000000000000800200000000000000000000000000005003000050030000500300005003000050030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e6574706369300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500280020000000001000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000027465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000fe18b61a000800000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c657231000000000000000000000000000004000000000000000000000005000000a60000000000000000000000000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800434c4153534946590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') getpeername$packet(r2, 0x0, &(0x7f0000000100)) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x4200, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, 0x0) 06:00:31 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 443.678123][ T26] audit: type=1804 audit(1582005631.637:206): pid=16531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/258/bus/file0" dev="overlay" ino=16737 res=1 06:00:31 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000080)=""/164, 0x1f4}], 0x1, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x8e56b071b577b247, 0x0) mount$fuseblk(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x1}, 0x50) symlink(&(0x7f0000006240)='./file0\x00', &(0x7f0000006580)='./file0/file0\x00') write$FUSE_ENTRY(r0, &(0x7f0000000540)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85eb}}}, 0x90) [ 443.739157][T16539] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 06:00:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 443.966064][T16551] fuse: Bad value for 'fd' 06:00:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:32 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:32 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 444.313539][T16560] device bridge40 entered promiscuous mode [ 444.337968][T16542] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 444.406341][T16564] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 444.458085][ T26] audit: type=1804 audit(1582005632.417:207): pid=16562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/259/bus/file0" dev="sda1" ino=16523 res=1 [ 444.525891][T16564] device bridge40 left promiscuous mode 06:00:32 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 06:00:32 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000008380)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000002004000000000000800200000000000000000000000000005003000050030000500300005003000050030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e6574706369300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500280020000000001000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000027465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000fe18b61a000800000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c657231000000000000000000000000000004000000000000000000000005000000a60000000000000000000000000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800434c4153534946590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') getpeername$packet(r2, 0x0, &(0x7f0000000100)) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x4200, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, 0x0) 06:00:32 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:32 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 444.949424][ T26] audit: type=1804 audit(1582005632.907:208): pid=16581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/260/bus/file0" dev="overlay" ino=16689 res=1 [ 445.045101][T16582] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 06:00:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:33 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:33 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 06:00:33 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000008380)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000002004000000000000800200000000000000000000000000005003000050030000500300005003000050030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e6574706369300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500280020000000001000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000027465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000fe18b61a000800000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c657231000000000000000000000000000004000000000000000000000005000000a60000000000000000000000000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800434c4153534946590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') getpeername$packet(r2, 0x0, &(0x7f0000000100)) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x4200, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, 0x0) [ 445.381360][T16592] device bridge41 entered promiscuous mode [ 445.393293][T16592] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 445.540432][T16592] device bridge41 left promiscuous mode [ 445.747643][T16599] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 445.878624][ T26] audit: type=1804 audit(1582005633.837:209): pid=16602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/261/bus/file0" dev="overlay" ino=16674 res=1 06:00:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:34 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) [ 446.253855][T16609] device bridge42 entered promiscuous mode [ 446.299438][T16609] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 446.317174][T16609] device bridge42 left promiscuous mode 06:00:34 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000008380)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000002004000000000000800200000000000000000000000000005003000050030000500300005003000050030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e6574706369300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500280020000000001000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000027465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000fe18b61a000800000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c657231000000000000000000000000000004000000000000000000000005000000a60000000000000000000000000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800434c4153534946590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') getpeername$packet(r2, 0x0, &(0x7f0000000100)) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x4200, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, 0x0) [ 446.333891][ T26] audit: type=1804 audit(1582005634.287:210): pid=16612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/262/bus/file0" dev="overlay" ino=16674 res=1 06:00:34 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:34 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:00:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 446.879944][T16627] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 446.919903][ T26] audit: type=1804 audit(1582005634.877:211): pid=16626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/263/bus/file0" dev="overlay" ino=16629 res=1 [ 447.018900][T16630] device bridge43 entered promiscuous mode 06:00:35 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:00:35 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 447.118187][T16630] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 447.195704][T16630] device bridge43 left promiscuous mode 06:00:35 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 447.541499][ T26] audit: type=1804 audit(1582005635.497:212): pid=16644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/264/bus/file0" dev="overlay" ino=16612 res=1 06:00:35 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:35 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:35 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:00:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:36 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 448.131622][T16657] device bridge44 entered promiscuous mode 06:00:36 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 448.208167][T16663] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 448.296306][T16663] device bridge44 left promiscuous mode [ 448.483303][ T26] audit: type=1804 audit(1582005636.437:213): pid=16670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/265/bus/file0" dev="overlay" ino=16708 res=1 06:00:36 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:36 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:36 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:36 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 449.329517][T16692] device bridge45 entered promiscuous mode [ 449.422236][T16696] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 449.508894][T16696] device bridge45 left promiscuous mode 06:00:37 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:37 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:37 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:38 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 450.117559][T16708] device bridge46 entered promiscuous mode [ 450.174003][T16708] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 450.267446][T16708] device bridge46 left promiscuous mode 06:00:38 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:38 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:38 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 451.013279][T16723] device bridge47 entered promiscuous mode [ 451.058633][T16723] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:39 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 451.164288][T16723] device bridge47 left promiscuous mode 06:00:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:39 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 451.795274][T16736] device bridge48 entered promiscuous mode [ 451.837936][T16736] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:39 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 451.909057][T16736] device bridge48 left promiscuous mode 06:00:40 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 452.403650][T16751] device bridge49 entered promiscuous mode [ 452.443777][T16751] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 452.459103][T16751] device bridge49 left promiscuous mode 06:00:40 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:40 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:40 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:41 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 453.181382][T16765] device bridge50 entered promiscuous mode [ 453.199637][T16765] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 453.217679][T16765] device bridge50 left promiscuous mode 06:00:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:41 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:41 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:41 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:42 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 454.064437][T16773] device bridge_slave_0 left promiscuous mode [ 454.071019][T16773] bridge38: port 1(bridge_slave_0) entered disabled state [ 454.245009][T16773] bridge17: port 1(bridge_slave_0) entered blocking state [ 454.264113][T16773] bridge17: port 1(bridge_slave_0) entered disabled state [ 454.330975][T16773] device bridge_slave_0 entered promiscuous mode [ 454.374161][T16773] bridge17: port 1(bridge_slave_0) entered blocking state [ 454.381461][T16773] bridge17: port 1(bridge_slave_0) entered forwarding state 06:00:42 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 454.463258][T16778] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:43 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:43 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:43 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 455.560992][T16805] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:43 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:43 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:43 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:44 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:44 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) [ 456.428996][T16826] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:45 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 457.068178][T16842] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:45 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:45 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:45 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 457.895048][T16859] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:46 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:46 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:46 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:46 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 458.736992][T16874] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:46 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:47 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 459.309664][T16889] device bridge51 entered promiscuous mode 06:00:47 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 459.362731][T16890] device bridge_slave_0 left promiscuous mode 06:00:47 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 459.435285][T16890] bridge17: port 1(bridge_slave_0) entered disabled state [ 459.634410][T16893] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:47 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 459.863172][T16905] device bridge53 entered promiscuous mode [ 459.878513][T16905] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:48 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 460.142383][T16912] device bridge55 entered promiscuous mode [ 460.182978][T16915] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:48 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:48 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 460.673741][T16925] device bridge57 entered promiscuous mode 06:00:48 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 460.744581][T16926] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:48 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:49 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 461.244693][T16938] device bridge59 entered promiscuous mode [ 461.292174][T16940] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:49 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 461.858246][T16950] device bridge61 entered promiscuous mode 06:00:49 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) [ 461.917448][T16951] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:50 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:50 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:50 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 462.357385][T16961] device bridge63 entered promiscuous mode 06:00:50 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 462.402873][T16961] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 462.921702][T16976] device bridge65 entered promiscuous mode 06:00:51 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 463.013966][T16976] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 463.027313][ T26] audit: type=1804 audit(1582005650.987:214): pid=16955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir189949889/syzkaller.jhMQRp/301/bus/file0" dev="overlay" ino=17239 res=1 06:00:51 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:51 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:51 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 463.488670][T16986] device bridge67 entered promiscuous mode [ 463.580139][T16988] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:51 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:52 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:52 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 464.263172][T17010] bridge17: port 1(bridge_slave_0) entered blocking state [ 464.278213][T17010] bridge17: port 1(bridge_slave_0) entered disabled state [ 464.349065][T17010] device bridge_slave_0 entered promiscuous mode [ 464.379970][T17010] bridge17: port 1(bridge_slave_0) entered blocking state [ 464.387321][T17010] bridge17: port 1(bridge_slave_0) entered forwarding state 06:00:52 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) [ 464.415583][T17012] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:52 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:52 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) 06:00:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:52 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 465.152051][T17034] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:53 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:53 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:53 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:53 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) 06:00:53 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) [ 465.854760][T17049] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:54 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:54 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) 06:00:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:54 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:54 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 466.724638][T17073] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:55 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:55 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 467.375528][T17089] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:55 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) 06:00:55 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:55 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:56 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:56 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 468.184810][T17108] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:56 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) 06:00:56 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) [ 468.738768][T17122] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:56 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:57 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) 06:00:57 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) 06:00:57 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 469.568309][T17139] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:57 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 470.085986][ T26] audit: type=1804 audit(1582005658.047:215): pid=17148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir991788372/syzkaller.xRAgmo/262/bus/file0" dev="overlay" ino=17244 res=1 06:00:58 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 470.153063][T17158] device bridge1 entered promiscuous mode 06:00:58 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{0x0}], 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 470.386568][T17162] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:00:58 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{0x0}], 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:58 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{0x0}], 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 470.665210][T17170] overlayfs: failed to resolve './bus': -2 [ 470.674510][T17158] netlink: 'syz-executor.0': attribute type 25 has an invalid length. 06:00:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 470.721356][T17158] device bridge1 left promiscuous mode 06:00:58 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{0x0}], 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:00:58 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x40d09) 06:00:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:59 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) [ 471.152748][ T26] audit: type=1804 audit(1582005659.107:216): pid=17197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/302/bus" dev="sda1" ino=16625 res=1 06:00:59 executing program 0: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) [ 471.255446][T17189] device bridge_slave_0 left promiscuous mode [ 471.261740][T17189] bridge17: port 1(bridge_slave_0) entered disabled state 06:00:59 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:00:59 executing program 3: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) [ 471.508777][ T26] audit: type=1804 audit(1582005659.467:217): pid=17205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/303/bus" dev="sda1" ino=16595 res=1 [ 471.608565][ T26] audit: type=1804 audit(1582005659.467:218): pid=17207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir189949889/syzkaller.jhMQRp/309/bus" dev="sda1" ino=16659 res=1 [ 471.664744][T17192] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 471.729103][T17210] device bridge5 entered promiscuous mode 06:00:59 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:00:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:00:59 executing program 0: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) [ 471.806675][T17213] device bridge_slave_0 left promiscuous mode [ 471.816709][ T26] audit: type=1804 audit(1582005659.777:219): pid=17217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir991788372/syzkaller.xRAgmo/265/bus" dev="sda1" ino=16532 res=1 06:00:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 471.911554][T17213] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.054609][T17213] bridge5: port 1(bridge_slave_0) entered blocking state [ 472.074535][T17213] bridge5: port 1(bridge_slave_0) entered disabled state [ 472.081475][ T26] audit: type=1804 audit(1582005660.037:220): pid=17226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir189949889/syzkaller.jhMQRp/310/bus" dev="sda1" ino=16534 res=1 [ 472.099518][T17213] device bridge_slave_0 entered promiscuous mode 06:01:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000004c0)) 06:01:00 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 472.152881][ T26] audit: type=1804 audit(1582005660.077:221): pid=17230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/304/bus" dev="sda1" ino=16626 res=1 [ 472.167458][T17213] bridge5: port 1(bridge_slave_0) entered blocking state [ 472.187748][T17213] bridge5: port 1(bridge_slave_0) entered forwarding state [ 472.238653][T17233] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 472.326536][T17215] netlink: 'syz-executor.4': attribute type 25 has an invalid length. 06:01:00 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:00 executing program 4: mkdir(0x0, 0x0) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:01:00 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 472.786973][ T26] audit: type=1804 audit(1582005660.747:222): pid=17249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/287/bus" dev="sda1" ino=16488 res=1 [ 472.876749][T17231] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 472.947356][T17232] device bridge_slave_0 left promiscuous mode [ 472.953699][T17232] bridge1: port 1(bridge_slave_0) entered disabled state 06:01:00 executing program 2: mkdir(0x0, 0x0) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:01:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 473.084992][T17232] bridge2: port 1(bridge_slave_0) entered blocking state [ 473.094491][T17232] bridge2: port 1(bridge_slave_0) entered disabled state [ 473.118610][T17232] device bridge_slave_0 entered promiscuous mode [ 473.173245][T17239] device bridge2 entered promiscuous mode 06:01:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 473.250434][T17243] device bridge_slave_0 left promiscuous mode [ 473.266674][ T26] audit: type=1804 audit(1582005661.227:223): pid=17257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/306/bus" dev="sda1" ino=16707 res=1 06:01:01 executing program 4: mkdir(0x0, 0x0) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) [ 473.309770][T17243] bridge0: port 1(bridge_slave_0) entered disabled state 06:01:01 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 473.444530][T17243] bridge2: port 1(bridge_slave_0) entered blocking state [ 473.467753][T17243] bridge2: port 1(bridge_slave_0) entered disabled state [ 473.519368][T17243] device bridge_slave_0 entered promiscuous mode [ 473.534722][ T26] audit: type=1804 audit(1582005661.497:224): pid=17265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/288/bus" dev="sda1" ino=16517 res=1 [ 473.581051][T17243] bridge2: port 1(bridge_slave_0) entered blocking state [ 473.588301][T17243] bridge2: port 1(bridge_slave_0) entered forwarding state [ 473.646227][T17244] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 473.676974][T17244] bridge2: port 1(bridge_slave_0) entered disabled state [ 473.691780][T17244] device bridge2 left promiscuous mode 06:01:01 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 474.027254][T17259] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:02 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000004c0)) 06:01:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:02 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 474.395272][T17269] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 06:01:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 474.654498][T17281] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 474.705078][T17279] device bridge3 entered promiscuous mode 06:01:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 474.745310][T17285] device bridge_slave_0 left promiscuous mode [ 474.783180][T17285] bridge2: port 1(bridge_slave_0) entered disabled state 06:01:02 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:02 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 474.925257][T17285] bridge3: port 1(bridge_slave_0) entered blocking state [ 474.957498][T17285] bridge3: port 1(bridge_slave_0) entered disabled state [ 475.018081][T17285] device bridge_slave_0 entered promiscuous mode [ 475.073819][T17285] bridge3: port 1(bridge_slave_0) entered blocking state [ 475.081054][T17285] bridge3: port 1(bridge_slave_0) entered forwarding state 06:01:03 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 475.197578][T17288] bridge3: port 1(bridge_slave_0) entered disabled state [ 475.254884][T17288] device bridge3 left promiscuous mode 06:01:03 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:03 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 475.585682][T17299] validate_nla: 1 callbacks suppressed [ 475.585694][T17299] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000004c0)) 06:01:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:03 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 475.875063][T17303] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 06:01:04 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 476.149645][T17320] device bridge4 entered promiscuous mode [ 476.173084][T17325] device bridge_slave_0 left promiscuous mode [ 476.191401][T17325] bridge3: port 1(bridge_slave_0) entered disabled state 06:01:04 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 476.345054][T17325] bridge4: port 1(bridge_slave_0) entered blocking state [ 476.352349][T17325] bridge4: port 1(bridge_slave_0) entered disabled state [ 476.397891][T17325] device bridge_slave_0 entered promiscuous mode [ 476.440213][T17325] bridge4: port 1(bridge_slave_0) entered blocking state [ 476.447467][T17325] bridge4: port 1(bridge_slave_0) entered forwarding state 06:01:04 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 476.516460][T17328] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 476.578288][T17329] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 476.636266][T17329] bridge4: port 1(bridge_slave_0) entered disabled state [ 476.682940][T17329] device bridge4 left promiscuous mode 06:01:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:04 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:04 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 477.109954][T17344] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:05 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:05 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:05 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 477.481021][T17360] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:05 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 477.817738][T17368] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:06 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:06 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:06 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 478.185587][T17375] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:06 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 478.571760][T17390] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:06 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:06 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:01:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:06 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:06 executing program 5: getpid() perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:06 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:06 executing program 3: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) [ 479.067702][T17401] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6], 0x2}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 479.296783][ T26] audit: type=1804 audit(1582005667.257:225): pid=17406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir991788372/syzkaller.xRAgmo/272/bus" dev="sda1" ino=17137 res=1 06:01:07 executing program 5: getpid() perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 479.450712][ T26] audit: type=1804 audit(1582005667.347:226): pid=17413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/293/bus" dev="sda1" ino=16522 res=1 06:01:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6], 0x2}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:07 executing program 3: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:01:07 executing program 5: getpid() perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6], 0x2}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:08 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:01:08 executing program 2: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:01:08 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 480.249519][ T26] audit: type=1804 audit(1582005668.207:227): pid=17433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir991788372/syzkaller.xRAgmo/273/bus" dev="sda1" ino=16961 res=1 06:01:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:08 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 480.732561][ T26] audit: type=1804 audit(1582005668.687:228): pid=17445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/294/bus" dev="sda1" ino=17261 res=1 06:01:08 executing program 3: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) [ 480.799421][ T26] audit: type=1804 audit(1582005668.757:229): pid=17438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/314/bus" dev="sda1" ino=17256 res=1 [ 480.855331][T17452] validate_nla: 4 callbacks suppressed [ 480.855341][T17452] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:08 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:09 executing program 2: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) [ 481.301287][ T26] audit: type=1804 audit(1582005669.257:230): pid=17455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir991788372/syzkaller.xRAgmo/274/bus/bus" dev="sda1" ino=17267 res=1 [ 481.318865][T17463] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:09 executing program 4: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:01:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:09 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 481.569797][ T26] audit: type=1804 audit(1582005669.527:231): pid=17466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/315/bus" dev="sda1" ino=17271 res=1 06:01:09 executing program 0: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:01:09 executing program 3: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) [ 481.892977][T17469] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:10 executing program 5: getpid() sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 482.067889][ T26] audit: type=1804 audit(1582005670.027:232): pid=17478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/295/bus/bus" dev="sda1" ino=16961 res=1 06:01:10 executing program 2: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) [ 482.293130][T17487] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:10 executing program 3: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x40d09) [ 482.401085][ T26] audit: type=1804 audit(1582005670.357:233): pid=17482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir991788372/syzkaller.xRAgmo/275/bus/bus" dev="overlay" ino=17271 res=1 06:01:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 482.528435][ T26] audit: type=1804 audit(1582005670.487:234): pid=17491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/316/bus" dev="sda1" ino=16522 res=1 [ 482.696689][T17496] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:10 executing program 4: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:01:10 executing program 5: getpid() sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:11 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x50) [ 483.151185][T17509] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:11 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:11 executing program 0: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:01:11 executing program 5: getpid() sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:11 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x50) [ 483.648589][T17527] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:11 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x50) 06:01:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b1", 0x1}], 0x1}, 0x8000) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 06:01:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0008005a00004c52f8cef6fee01d28ce2a981bd5763661c67d73088e1b31bf1ff23ee3ebc5f170ef97ffd648094a05a898ab28f55bba2017a6245638f6c2a0dd207506c794b4495dc4f7d9be6b097de60c3b2738204757b31c897af37020289c49b1e4b984c4c2c9d4500eaac901bfb5ca35a35c6d4e086c632f20ff78ee12cd9d7a66dd256f1b"], 0x20002154}}, 0x0) setsockopt$sock_linger(r1, 0x1, 0x12, &(0x7f0000000100)={0xffffffff}, 0x8) accept$unix(r1, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0x6b) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) write(0xffffffffffffffff, &(0x7f0000000140)="0b08a48f89c6bdb81f3f4c09681442853e3a66a828db48be0c999fad8df2ffa151ef", 0x22) 06:01:11 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:12 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x50) [ 483.998611][T17537] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0008005a00004c52f8cef6fee01d28ce2a981bd5763661c67d73088e1b31bf1ff23ee3ebc5f170ef97ffd648094a05a898ab28f55bba2017a6245638f6c2a0dd207506c794b4495dc4f7d9be6b097de60c3b2738204757b31c897af37020289c49b1e4b984c4c2c9d4500eaac901bfb5ca35a35c6d4e086c632f20ff78ee12cd9d7a66dd256f1b"], 0x20002154}}, 0x0) setsockopt$sock_linger(r1, 0x1, 0x12, &(0x7f0000000100)={0xffffffff}, 0x8) accept$unix(r1, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0x6b) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv_slave_0\x00', {0x3}, 0x9}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) write(r2, &(0x7f0000000140)="0b08a48f89c6bdb81f3f4c09681442853e3a66a828db48be0c999fad8df2ffa151ef", 0x22) 06:01:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af0"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:12 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:12 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x50) [ 484.351662][T17558] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af0"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 484.528085][T17566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 06:01:12 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x50) 06:01:12 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 484.603133][T17566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.627694][T17566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 484.682828][T17566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.767951][T17566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 06:01:12 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 484.811762][T17566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.835183][T17566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 484.889883][T17566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.929226][T17566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 06:01:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0008005a00004c52f8cef6fee01d28ce2a981bd5763661c67d73088e1b31bf1ff23ee3ebc5f170ef97ffd648094a05a898ab28f55bba2017a6245638f6c2a0dd207506c794b4495dc4f7d9be6b097de60c3b2738204757b31c897af37020289c49b1e4b984c4c2c9d4500eaac901bfb5ca35a35c6d4e086c632f20ff78ee12cd9d7a66dd256f1b"], 0x20002154}}, 0x0) setsockopt$sock_linger(r1, 0x1, 0x12, &(0x7f0000000100)={0xffffffff}, 0x8) accept$unix(r1, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0x6b) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv_slave_0\x00', {0x3}, 0x9}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) write(r2, &(0x7f0000000140)="0b08a48f89c6bdb81f3f4c09681442853e3a66a828db48be0c999fad8df2ffa151ef", 0x22) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x40020) [ 484.944152][T17566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.961025][T17566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 484.971895][T17566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.012742][T17577] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:13 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:13 executing program 3: r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x50) 06:01:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af0"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:13 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0008005a00004c52f8cef6fee01d28ce2a981bd5763661c67d73088e1b31bf1ff23ee3ebc5f170ef97ffd648094a05a898ab28f55bba2017a6245638f6c2a0dd207506c794b4495dc4f7d9be6b097de60c3b2738204757b31c897af37020289c49b1e4b984c4c2c9d4500eaac901bfb5ca35a35c6d4e086c632f20ff78ee12cd9d7a66dd256f1b"], 0x20002154}}, 0x0) setsockopt$sock_linger(r1, 0x1, 0x12, &(0x7f0000000100)={0xffffffff}, 0x8) accept$unix(r1, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0x6b) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv_slave_0\x00', {0x3}, 0x9}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) write(r2, &(0x7f0000000140)="0b08a48f89c6bdb81f3f4c09681442853e3a66a828db48be0c999fad8df2ffa151ef", 0x22) 06:01:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4f, 0x2}, @ramp}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) [ 485.309396][T17596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 06:01:13 executing program 3: r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x50) 06:01:13 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 485.482460][T17596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.503059][T17596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 485.521864][T17596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.532166][T17596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 485.549830][T17596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.653105][T17596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 06:01:13 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 485.696258][T17596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.718115][T17596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 485.736790][T17596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.757266][T17596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 485.775755][T17596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 06:01:13 executing program 3: r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x50) 06:01:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a06"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:13 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:13 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x362, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/packet\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) 06:01:14 executing program 4 (fault-call:8 fault-nth:0): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:14 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 486.186430][T17638] validate_nla: 1 callbacks suppressed [ 486.186441][T17638] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:14 executing program 3: fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r0], 0x1}, 0x50) 06:01:14 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x362, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/packet\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) 06:01:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a06"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:14 executing program 2 (fault-call:7 fault-nth:0): mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) [ 486.461439][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 486.461456][ T26] audit: type=1804 audit(1582005674.417:239): pid=17646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/300/bus/file0" dev="overlay" ino=16770 res=1 06:01:14 executing program 3: fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r0], 0x1}, 0x50) [ 486.511085][T17654] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:14 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 486.565245][T17658] FAULT_INJECTION: forcing a failure. [ 486.565245][T17658] name failslab, interval 1, probability 0, space 0, times 1 [ 486.670067][T17658] CPU: 1 PID: 17658 Comm: syz-executor.4 Not tainted 5.6.0-rc2-syzkaller #0 [ 486.678810][T17658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.688879][T17658] Call Trace: [ 486.692261][T17658] dump_stack+0x197/0x210 [ 486.696703][T17658] should_fail.cold+0x5/0xd [ 486.701245][T17658] ? fault_create_debugfs_attr+0x140/0x140 [ 486.707155][T17658] ? ___might_sleep+0x163/0x2c0 [ 486.712100][T17658] __should_failslab+0xb7/0x100 [ 486.717036][T17658] should_failslab+0x9/0x14 [ 486.721619][T17658] __kmalloc+0x2e0/0x770 [ 486.725911][T17658] ? mark_held_locks+0xf0/0xf0 [ 486.730768][T17658] ? _parse_integer+0x190/0x190 [ 486.731024][ T26] audit: type=1804 audit(1582005674.687:240): pid=17664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/321/bus" dev="sda1" ino=16993 res=1 [ 486.735705][T17658] ? tomoyo_realpath_from_path+0xc5/0x660 [ 486.735743][T17658] tomoyo_realpath_from_path+0xc5/0x660 [ 486.735768][T17658] ? tomoyo_path_number_perm+0x193/0x520 [ 486.780231][T17658] tomoyo_path_number_perm+0x1dd/0x520 [ 486.785716][T17658] ? tomoyo_path_number_perm+0x193/0x520 [ 486.791386][T17658] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 486.797250][T17658] ? __f_unlock_pos+0x19/0x20 [ 486.801979][T17658] ? ___might_sleep+0x163/0x2c0 [ 486.806964][T17658] ? selinux_file_mprotect+0x620/0x620 [ 486.812447][T17658] ? __fget_files+0x359/0x520 [ 486.817163][T17658] ? ksys_dup3+0x3e0/0x3e0 [ 486.819985][T17664] FAULT_INJECTION: forcing a failure. [ 486.819985][T17664] name failslab, interval 1, probability 0, space 0, times 1 [ 486.821679][T17658] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 486.821709][T17658] tomoyo_file_ioctl+0x23/0x30 [ 486.845063][T17658] security_file_ioctl+0x77/0xc0 [ 486.850100][T17658] ksys_ioctl+0x56/0x180 [ 486.854376][T17658] __x64_sys_ioctl+0x73/0xb0 [ 486.858993][T17658] do_syscall_64+0xfa/0x790 [ 486.863534][T17658] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 486.869449][T17658] RIP: 0033:0x45c6b9 [ 486.873361][T17658] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 486.893107][T17658] RSP: 002b:00007fa251d0cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.901540][T17658] RAX: ffffffffffffffda RBX: 00007fa251d0d6d4 RCX: 000000000045c6b9 [ 486.909530][T17658] RDX: 00000000200003c0 RSI: 00000000c0189436 RDI: 0000000000000004 06:01:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a06"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:14 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x362, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/packet\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) [ 486.917538][T17658] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 486.925627][T17658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 486.933608][T17658] R13: 00000000000002f4 R14: 00000000004c5369 R15: 0000000000000000 [ 486.974493][T17664] CPU: 1 PID: 17664 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 [ 486.983237][T17664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.993304][T17664] Call Trace: [ 486.996616][T17664] dump_stack+0x197/0x210 [ 487.000989][T17664] should_fail.cold+0x5/0xd [ 487.005536][T17664] ? fault_create_debugfs_attr+0x140/0x140 [ 487.011381][T17664] ? ___might_sleep+0x163/0x2c0 [ 487.016265][T17664] __should_failslab+0xb7/0x100 [ 487.021137][T17664] should_failslab+0x9/0x14 [ 487.025665][T17664] kmem_cache_alloc_trace+0x2d3/0x790 [ 487.031062][T17664] ? __this_cpu_preempt_check+0x35/0x190 [ 487.034420][T17667] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 487.036715][T17664] ? retint_kernel+0x2b/0x2b [ 487.036743][T17664] alloc_pipe_info+0x10e/0x510 [ 487.036862][T17664] splice_direct_to_actor+0x80e/0xa30 [ 487.059638][T17664] ? avc_policy_seqno+0xd/0x70 [ 487.067617][T17664] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 487.073367][T17664] ? generic_pipe_buf_nosteal+0x10/0x10 [ 487.078934][T17664] ? selinux_file_permission+0x9b/0x580 [ 487.084503][T17664] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 487.090772][T17664] ? do_splice_to+0x180/0x180 [ 487.095582][T17664] ? rw_verify_area+0x126/0x360 [ 487.100468][T17664] do_splice_direct+0x1da/0x2a0 [ 487.105347][T17664] ? splice_direct_to_actor+0xa30/0xa30 [ 487.110914][T17664] ? rcu_read_lock_any_held+0xcd/0xf0 [ 487.116321][T17664] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 06:01:15 executing program 0 (fault-call:6 fault-nth:0): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000014c0)) 06:01:15 executing program 3: fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r0], 0x1}, 0x50) [ 487.122582][T17664] ? __this_cpu_preempt_check+0x35/0x190 [ 487.128243][T17664] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 487.134502][T17664] ? __sb_start_write+0x1e5/0x460 [ 487.139566][T17664] do_sendfile+0x597/0xd00 [ 487.144039][T17664] ? do_compat_pwritev64+0x1c0/0x1c0 [ 487.149424][T17664] ? trace_hardirqs_on_caller+0x6a/0x240 [ 487.155190][T17664] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 487.160688][T17664] __x64_sys_sendfile64+0x1dd/0x220 [ 487.166034][T17664] ? __ia32_sys_sendfile+0x230/0x230 [ 487.171391][T17664] do_syscall_64+0xfa/0x790 [ 487.175928][T17664] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 487.181836][T17664] RIP: 0033:0x45c6b9 [ 487.185746][T17664] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 487.205366][T17664] RSP: 002b:00007f97edae2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 487.213797][T17664] RAX: ffffffffffffffda RBX: 00007f97edae36d4 RCX: 000000000045c6b9 [ 487.221785][T17664] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 487.229778][T17664] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 487.237766][T17664] R10: 0000000000040d09 R11: 0000000000000246 R12: 0000000000000006 [ 487.245757][T17664] R13: 00000000000008d0 R14: 00000000004cb5c8 R15: 0000000000000000 [ 487.391291][T17680] FAULT_INJECTION: forcing a failure. [ 487.391291][T17680] name failslab, interval 1, probability 0, space 0, times 0 [ 487.405556][T17680] CPU: 0 PID: 17680 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 [ 487.411169][T17658] ERROR: Out of memory at tomoyo_realpath_from_path. [ 487.414261][T17680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.414267][T17680] Call Trace: [ 487.414294][T17680] dump_stack+0x197/0x210 [ 487.414324][T17680] should_fail.cold+0x5/0xd [ 487.414351][T17680] ? fault_create_debugfs_attr+0x140/0x140 [ 487.414375][T17680] ? ___might_sleep+0x163/0x2c0 [ 487.414402][T17680] __should_failslab+0xb7/0x100 [ 487.414419][T17680] should_failslab+0x9/0x14 [ 487.414436][T17680] __kmalloc+0x2e0/0x770 [ 487.414451][T17680] ? mark_held_locks+0xf0/0xf0 [ 487.414469][T17680] ? avc_has_perm+0x376/0x610 [ 487.414491][T17680] ? tomoyo_realpath_from_path+0xc5/0x660 [ 487.414518][T17680] tomoyo_realpath_from_path+0xc5/0x660 [ 487.414531][T17680] ? tomoyo_path_perm+0x1cb/0x430 [ 487.414567][T17680] tomoyo_path_perm+0x230/0x430 [ 487.498108][T17680] ? tomoyo_path_perm+0x1cb/0x430 [ 487.503123][T17680] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 487.509244][T17680] ? avc_has_perm_noaudit+0x570/0x570 [ 487.514627][T17680] ? ___might_sleep+0x163/0x2c0 [ 487.519481][T17680] ? selinux_file_permission+0x580/0x580 [ 487.525101][T17680] ? ksys_dup3+0x3e0/0x3e0 [ 487.529525][T17680] ? lock_downgrade+0x920/0x920 [ 487.534363][T17680] tomoyo_inode_getattr+0x1d/0x30 [ 487.539375][T17680] security_inode_getattr+0xf2/0x150 [ 487.544652][T17680] vfs_getattr+0x25/0x70 [ 487.548924][T17680] vfs_statx_fd+0x71/0xc0 [ 487.553249][T17680] __do_sys_newfstat+0x9b/0x120 [ 487.558087][T17680] ? cp_new_stat+0x5f0/0x5f0 [ 487.562665][T17680] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 487.568903][T17680] ? fput_many+0x12c/0x1a0 [ 487.573302][T17680] ? fput+0x1b/0x20 [ 487.577097][T17680] ? ksys_write+0x1cf/0x290 [ 487.581607][T17680] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 487.587050][T17680] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 487.592519][T17680] ? do_syscall_64+0x26/0x790 [ 487.597295][T17680] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 487.603357][T17680] ? do_syscall_64+0x26/0x790 [ 487.608031][T17680] ? lockdep_hardirqs_on+0x421/0x5e0 [ 487.613364][T17680] __x64_sys_newfstat+0x54/0x80 [ 487.618202][T17680] do_syscall_64+0xfa/0x790 [ 487.622692][T17680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 487.628568][T17680] RIP: 0033:0x45c6b9 [ 487.632447][T17680] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 487.652041][T17680] RSP: 002b:00007fe351b7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 487.660445][T17680] RAX: ffffffffffffffda RBX: 00007fe351b7c6d4 RCX: 000000000045c6b9 [ 487.668414][T17680] RDX: 0000000000000000 RSI: 00000000200014c0 RDI: 0000000000000003 [ 487.676373][T17680] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 487.684328][T17680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 06:01:15 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:15 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:15 executing program 2 (fault-call:7 fault-nth:1): mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:01:15 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x50) [ 487.692345][T17680] R13: 00000000000000e4 R14: 00000000004c3548 R15: 0000000000000000 [ 487.729285][T17680] ERROR: Out of memory at tomoyo_realpath_from_path. [ 487.808654][T17685] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 487.839349][ T26] audit: type=1804 audit(1582005675.797:241): pid=17690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/322/bus" dev="sda1" ino=16577 res=1 06:01:15 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:15 executing program 0 (fault-call:6 fault-nth:1): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000014c0)) [ 487.913727][T17690] FAULT_INJECTION: forcing a failure. [ 487.913727][T17690] name failslab, interval 1, probability 0, space 0, times 0 [ 487.950861][T17690] CPU: 1 PID: 17690 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 [ 487.959600][T17690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.969670][T17690] Call Trace: [ 487.972987][T17690] dump_stack+0x197/0x210 [ 487.977366][T17690] should_fail.cold+0x5/0xd [ 487.981921][T17690] ? fault_create_debugfs_attr+0x140/0x140 [ 487.987767][T17690] ? ___might_sleep+0x163/0x2c0 [ 487.992659][T17690] __should_failslab+0xb7/0x100 [ 487.997542][T17690] should_failslab+0x9/0x14 [ 488.006676][T17690] __kmalloc+0x2e0/0x770 [ 488.010949][T17690] ? kmem_cache_alloc_trace+0x397/0x790 [ 488.016528][T17690] ? alloc_pipe_info+0x1ee/0x510 [ 488.021510][T17690] alloc_pipe_info+0x1ee/0x510 [ 488.026330][T17690] splice_direct_to_actor+0x80e/0xa30 [ 488.031500][ T26] audit: type=1804 audit(1582005675.987:242): pid=17696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/301/bus/file0" dev="overlay" ino=16739 res=1 06:01:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 488.031727][T17690] ? __inode_security_revalidate+0xf7/0x150 [ 488.065948][T17690] ? avc_policy_seqno+0xd/0x70 [ 488.070743][T17690] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 488.076480][T17690] ? generic_pipe_buf_nosteal+0x10/0x10 [ 488.082043][T17690] ? selinux_file_permission+0x9b/0x580 [ 488.087626][T17690] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 488.093896][T17690] ? do_splice_to+0x180/0x180 [ 488.098605][T17690] ? rw_verify_area+0x126/0x360 [ 488.103496][T17690] do_splice_direct+0x1da/0x2a0 [ 488.108373][T17690] ? splice_direct_to_actor+0xa30/0xa30 06:01:16 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x50) [ 488.113933][T17690] ? rcu_read_lock_any_held+0xcd/0xf0 [ 488.119342][T17690] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 488.125610][T17690] ? __this_cpu_preempt_check+0x35/0x190 [ 488.131274][T17690] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 488.137646][T17690] ? __sb_start_write+0x1e5/0x460 [ 488.142707][T17690] do_sendfile+0x597/0xd00 [ 488.147180][T17690] ? do_compat_pwritev64+0x1c0/0x1c0 [ 488.152513][T17690] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 488.158898][T17690] ? fput+0x1b/0x20 [ 488.162708][T17690] __x64_sys_sendfile64+0x1dd/0x220 [ 488.168055][T17690] ? __ia32_sys_sendfile+0x230/0x230 [ 488.173368][T17690] ? do_syscall_64+0x26/0x790 [ 488.178135][T17690] ? lockdep_hardirqs_on+0x421/0x5e0 [ 488.183469][T17690] ? trace_hardirqs_on+0x67/0x240 [ 488.188689][T17690] do_syscall_64+0xfa/0x790 [ 488.193431][T17690] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 488.199338][T17690] RIP: 0033:0x45c6b9 [ 488.203231][T17690] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 488.222841][T17690] RSP: 002b:00007f97edae2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 488.231257][T17690] RAX: ffffffffffffffda RBX: 00007f97edae36d4 RCX: 000000000045c6b9 [ 488.239278][T17690] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 488.247249][T17690] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 488.255248][T17690] R10: 0000000000040d09 R11: 0000000000000246 R12: 0000000000000006 [ 488.263216][T17690] R13: 00000000000008d0 R14: 00000000004cb5c8 R15: 0000000000000001 [ 488.372102][T17701] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:16 executing program 2 (fault-call:7 fault-nth:2): mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:01:16 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x2, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 488.551166][T17705] FAULT_INJECTION: forcing a failure. [ 488.551166][T17705] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 488.564427][T17705] CPU: 1 PID: 17705 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 [ 488.573117][T17705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.583215][T17705] Call Trace: [ 488.586536][T17705] dump_stack+0x197/0x210 [ 488.590908][T17705] should_fail.cold+0x5/0xd [ 488.595457][T17705] ? fault_create_debugfs_attr+0x140/0x140 [ 488.597217][ T26] audit: type=1804 audit(1582005676.557:243): pid=17717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/323/bus" dev="sda1" ino=16515 res=1 [ 488.601371][T17705] ? is_bpf_image_address+0x1b8/0x290 [ 488.601429][T17705] should_fail_alloc_page+0x50/0x60 [ 488.639426][T17705] __alloc_pages_nodemask+0x1a1/0x910 [ 488.644855][T17705] ? __alloc_pages_slowpath+0x2900/0x2900 [ 488.650598][T17705] ? __kasan_check_read+0x11/0x20 [ 488.655803][T17705] cache_grow_begin+0x90/0xc60 [ 488.657752][T17717] FAULT_INJECTION: forcing a failure. [ 488.657752][T17717] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 488.660593][T17705] ? trace_hardirqs_off+0x62/0x240 [ 488.660620][T17705] __kmalloc+0x6b2/0x770 [ 488.660634][T17705] ? mark_held_locks+0xf0/0xf0 [ 488.660661][T17705] ? tomoyo_realpath_from_path+0xc5/0x660 [ 488.660686][T17705] tomoyo_realpath_from_path+0xc5/0x660 [ 488.660702][T17705] ? tomoyo_path_perm+0x1cb/0x430 [ 488.660733][T17705] tomoyo_path_perm+0x230/0x430 [ 488.660756][T17705] ? tomoyo_path_perm+0x1cb/0x430 [ 488.689180][T17720] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 488.693811][T17705] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 488.693834][T17705] ? avc_has_perm_noaudit+0x570/0x570 [ 488.693871][T17705] ? ___might_sleep+0x163/0x2c0 [ 488.738744][T17705] ? selinux_file_permission+0x580/0x580 [ 488.744408][T17705] ? ksys_dup3+0x3e0/0x3e0 [ 488.748843][T17705] ? lock_downgrade+0x920/0x920 [ 488.753735][T17705] tomoyo_inode_getattr+0x1d/0x30 [ 488.758797][T17705] security_inode_getattr+0xf2/0x150 [ 488.764121][T17705] vfs_getattr+0x25/0x70 [ 488.768395][T17705] vfs_statx_fd+0x71/0xc0 [ 488.772750][T17705] __do_sys_newfstat+0x9b/0x120 [ 488.777621][T17705] ? cp_new_stat+0x5f0/0x5f0 [ 488.782229][T17705] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 488.788480][T17705] ? fput_many+0x12c/0x1a0 [ 488.792914][T17705] ? fput+0x1b/0x20 [ 488.796789][T17705] ? ksys_write+0x1cf/0x290 06:01:16 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 488.801308][T17705] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 488.806784][T17705] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 488.812258][T17705] ? do_syscall_64+0x26/0x790 [ 488.816967][T17705] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 488.823055][T17705] ? do_syscall_64+0x26/0x790 [ 488.827757][T17705] ? lockdep_hardirqs_on+0x421/0x5e0 [ 488.833076][T17705] __x64_sys_newfstat+0x54/0x80 [ 488.837960][T17705] do_syscall_64+0xfa/0x790 [ 488.842500][T17705] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 488.848408][T17705] RIP: 0033:0x45c6b9 [ 488.852320][T17705] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 488.871940][T17705] RSP: 002b:00007fe351b7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 488.880376][T17705] RAX: ffffffffffffffda RBX: 00007fe351b7c6d4 RCX: 000000000045c6b9 [ 488.888372][T17705] RDX: 0000000000000000 RSI: 00000000200014c0 RDI: 0000000000000003 [ 488.896360][T17705] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 488.904353][T17705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 488.912344][T17705] R13: 00000000000000e4 R14: 00000000004c3548 R15: 0000000000000001 [ 488.945488][T17717] CPU: 0 PID: 17717 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 [ 488.954294][T17717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.964358][T17717] Call Trace: [ 488.967672][T17717] dump_stack+0x197/0x210 [ 488.972040][T17717] should_fail.cold+0x5/0xd [ 488.976576][T17717] ? fault_create_debugfs_attr+0x140/0x140 [ 488.982404][T17717] ? ___might_sleep+0x163/0x2c0 [ 488.987291][T17717] should_fail_alloc_page+0x50/0x60 [ 488.992517][T17717] __alloc_pages_nodemask+0x1a1/0x910 [ 488.997936][T17717] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 489.003424][T17717] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 489.008921][T17717] ? __alloc_pages_slowpath+0x2900/0x2900 [ 489.014665][T17717] ? trace_hardirqs_on_caller+0x6a/0x240 [ 489.020312][T17717] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 489.025790][T17717] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 489.032132][T17717] alloc_pages_current+0x107/0x210 [ 489.037330][T17717] __page_cache_alloc+0x29d/0x490 [ 489.042385][T17717] ? generic_file_read_iter+0x1833/0x2cf0 [ 489.048146][T17717] generic_file_read_iter+0x186e/0x2cf0 [ 489.053738][T17717] ? mark_held_locks+0xa4/0xf0 [ 489.058547][T17717] ? filemap_write_and_wait_range+0x1d0/0x1d0 [ 489.064762][T17717] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 489.070260][T17717] ? __this_cpu_preempt_check+0x35/0x190 [ 489.075916][T17717] ? retint_kernel+0x2b/0x2b [ 489.080615][T17717] ext4_file_read_iter+0x1de/0x620 [ 489.085759][T17717] generic_file_splice_read+0x4af/0x800 [ 489.091344][T17717] ? add_to_pipe+0x3b0/0x3b0 [ 489.096105][T17717] ? rw_verify_area+0x126/0x360 [ 489.100993][T17717] ? add_to_pipe+0x3b0/0x3b0 [ 489.105635][T17717] do_splice_to+0x127/0x180 [ 489.110173][T17717] splice_direct_to_actor+0x320/0xa30 [ 489.115577][T17717] ? generic_pipe_buf_nosteal+0x10/0x10 [ 489.115844][T17722] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 489.121160][T17717] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 489.121187][T17717] ? do_splice_to+0x180/0x180 [ 489.140254][T17717] ? rw_verify_area+0x126/0x360 [ 489.145134][T17717] do_splice_direct+0x1da/0x2a0 [ 489.150015][T17717] ? splice_direct_to_actor+0xa30/0xa30 [ 489.155586][T17717] ? rcu_read_lock_any_held+0xcd/0xf0 [ 489.160999][T17717] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 489.167269][T17717] ? __this_cpu_preempt_check+0x35/0x190 [ 489.172937][T17717] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 489.179211][T17717] ? __sb_start_write+0x1e5/0x460 [ 489.184377][T17717] do_sendfile+0x597/0xd00 [ 489.188844][T17717] ? do_compat_pwritev64+0x1c0/0x1c0 [ 489.194163][T17717] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 489.199659][T17717] __x64_sys_sendfile64+0x1dd/0x220 [ 489.199689][ T26] audit: type=1804 audit(1582005676.907:244): pid=17726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/302/bus/file0" dev="overlay" ino=16657 res=1 [ 489.204863][T17717] ? __ia32_sys_sendfile+0x230/0x230 [ 489.204889][T17717] ? do_syscall_64+0xc0/0x790 06:01:17 executing program 0 (fault-call:6 fault-nth:2): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000014c0)) [ 489.204913][T17717] do_syscall_64+0xfa/0x790 [ 489.204937][T17717] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 489.204954][T17717] RIP: 0033:0x45c6b9 [ 489.257631][T17717] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 489.277461][T17717] RSP: 002b:00007f97edae2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 489.285883][T17717] RAX: ffffffffffffffda RBX: 00007f97edae36d4 RCX: 000000000045c6b9 06:01:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 489.293875][T17717] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 489.301865][T17717] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 489.309852][T17717] R10: 0000000000040d09 R11: 0000000000000246 R12: 0000000000000006 [ 489.317843][T17717] R13: 00000000000008d0 R14: 00000000004cb5c8 R15: 0000000000000002 06:01:17 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x50) [ 489.391352][T17728] overlayfs: './file0' not a directory 06:01:17 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:01:17 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 489.472581][ T26] audit: type=1804 audit(1582005677.427:245): pid=17728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/302/bus/bus/file0" dev="overlay" ino=16563 res=1 [ 489.489351][T17736] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:17 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:17 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x50) 06:01:17 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 489.767875][T17751] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 489.808360][T17748] FAULT_INJECTION: forcing a failure. [ 489.808360][T17748] name failslab, interval 1, probability 0, space 0, times 0 [ 489.852880][T17748] CPU: 1 PID: 17748 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 [ 489.861624][T17748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.871694][T17748] Call Trace: [ 489.875010][T17748] dump_stack+0x197/0x210 [ 489.879376][T17748] should_fail.cold+0x5/0xd [ 489.883919][T17748] ? fault_create_debugfs_attr+0x140/0x140 [ 489.889756][T17748] ? ___might_sleep+0x163/0x2c0 [ 489.894641][T17748] __should_failslab+0xb7/0x100 [ 489.899517][T17748] should_failslab+0x9/0x14 [ 489.904045][T17748] __kmalloc+0x2e0/0x770 [ 489.908304][T17748] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 489.914565][T17748] ? d_absolute_path+0x11b/0x170 [ 489.919525][T17748] ? __d_path+0x140/0x140 [ 489.923881][T17748] ? tomoyo_encode2.part.0+0xf5/0x400 [ 489.929293][T17748] tomoyo_encode2.part.0+0xf5/0x400 [ 489.934522][T17748] tomoyo_encode+0x2b/0x50 [ 489.938968][T17748] tomoyo_realpath_from_path+0x19c/0x660 [ 489.944639][T17748] tomoyo_path_perm+0x230/0x430 [ 489.949508][T17748] ? tomoyo_path_perm+0x1cb/0x430 [ 489.954568][T17748] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 489.960667][T17748] ? avc_has_perm_noaudit+0x570/0x570 [ 489.966092][T17748] ? ___might_sleep+0x163/0x2c0 [ 489.971004][T17748] ? selinux_file_permission+0x580/0x580 [ 489.976669][T17748] ? ksys_dup3+0x3e0/0x3e0 [ 489.981101][T17748] ? lock_downgrade+0x920/0x920 [ 489.985979][T17748] tomoyo_inode_getattr+0x1d/0x30 [ 489.991030][T17748] security_inode_getattr+0xf2/0x150 [ 489.996354][T17748] vfs_getattr+0x25/0x70 [ 489.997719][T17761] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 490.008795][T17748] vfs_statx_fd+0x71/0xc0 [ 490.008819][T17748] __do_sys_newfstat+0x9b/0x120 [ 490.008836][T17748] ? cp_new_stat+0x5f0/0x5f0 [ 490.008864][T17748] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 490.008878][T17748] ? fput_many+0x12c/0x1a0 [ 490.008893][T17748] ? fput+0x1b/0x20 [ 490.008915][T17748] ? ksys_write+0x1cf/0x290 [ 490.008937][T17748] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 490.008953][T17748] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 490.008969][T17748] ? do_syscall_64+0x26/0x790 [ 490.008985][T17748] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 490.008998][T17748] ? do_syscall_64+0x26/0x790 [ 490.009015][T17748] ? lockdep_hardirqs_on+0x421/0x5e0 [ 490.009043][T17748] __x64_sys_newfstat+0x54/0x80 [ 490.078193][T17748] do_syscall_64+0xfa/0x790 [ 490.082728][T17748] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 490.088633][T17748] RIP: 0033:0x45c6b9 [ 490.092549][T17748] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 490.105411][ T26] audit: type=1804 audit(1582005677.907:246): pid=17759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/324/bus" dev="sda1" ino=16564 res=1 [ 490.112165][T17748] RSP: 002b:00007fe351b7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 490.148019][T17748] RAX: ffffffffffffffda RBX: 00007fe351b7c6d4 RCX: 000000000045c6b9 [ 490.156007][T17748] RDX: 0000000000000000 RSI: 00000000200014c0 RDI: 0000000000000003 [ 490.164001][T17748] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 490.171996][T17748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 490.179990][T17748] R13: 00000000000000e4 R14: 00000000004c3548 R15: 0000000000000002 06:01:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 490.236661][T17748] ERROR: Out of memory at tomoyo_realpath_from_path. 06:01:18 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x50) 06:01:18 executing program 0 (fault-call:6 fault-nth:3): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000014c0)) [ 490.355123][ T26] audit: type=1804 audit(1582005678.317:247): pid=17769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/303/bus/file0" dev="overlay" ino=16705 res=1 06:01:18 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x4b47, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:18 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:18 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d08) 06:01:18 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x50) 06:01:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 490.758481][ T26] audit: type=1804 audit(1582005678.717:248): pid=17787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/325/bus" dev="sda1" ino=16545 res=1 06:01:18 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:18 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x50) [ 490.869039][T17781] FAULT_INJECTION: forcing a failure. [ 490.869039][T17781] name failslab, interval 1, probability 0, space 0, times 0 [ 490.940421][T17781] CPU: 0 PID: 17781 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 [ 490.949161][T17781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.959233][T17781] Call Trace: [ 490.962553][T17781] dump_stack+0x197/0x210 [ 490.966976][T17781] should_fail.cold+0x5/0xd [ 490.971636][T17781] ? fault_create_debugfs_attr+0x140/0x140 [ 490.977487][T17781] ? ___might_sleep+0x163/0x2c0 [ 490.982359][T17781] __should_failslab+0xb7/0x100 [ 490.987225][T17781] should_failslab+0x9/0x14 [ 490.991747][T17781] __kmalloc+0x2e0/0x770 [ 490.996015][T17781] ? mark_held_locks+0xf0/0xf0 [ 491.000807][T17781] ? avc_has_perm+0x376/0x610 [ 491.005514][T17781] ? tomoyo_realpath_from_path+0xc5/0x660 [ 491.011279][T17781] tomoyo_realpath_from_path+0xc5/0x660 [ 491.016850][T17781] ? tomoyo_path_perm+0x1cb/0x430 [ 491.021914][T17781] tomoyo_path_perm+0x230/0x430 [ 491.026790][T17781] ? tomoyo_path_perm+0x1cb/0x430 [ 491.031854][T17781] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 491.037949][T17781] ? avc_has_perm_noaudit+0x570/0x570 [ 491.043365][T17781] ? ___might_sleep+0x163/0x2c0 [ 491.048407][T17781] ? selinux_file_permission+0x580/0x580 [ 491.054072][T17781] ? tomoyo_path_perm+0x24e/0x430 [ 491.059135][T17781] tomoyo_inode_getattr+0x1d/0x30 [ 491.064191][T17781] security_inode_getattr+0xf2/0x150 [ 491.069512][T17781] vfs_getattr+0x25/0x70 [ 491.073889][T17781] ovl_getattr+0x180/0xd80 [ 491.078349][T17781] ? ovl_setattr+0x8b0/0x8b0 [ 491.082971][T17781] ? ___might_sleep+0x163/0x2c0 [ 491.087893][T17781] ? selinux_file_permission+0x580/0x580 [ 491.093692][T17781] vfs_getattr_nosec+0x1f7/0x290 [ 491.098657][T17781] ? ovl_setattr+0x8b0/0x8b0 [ 491.103282][T17781] vfs_getattr+0x4b/0x70 [ 491.107559][T17781] vfs_statx_fd+0x71/0xc0 [ 491.111912][T17781] __do_sys_newfstat+0x9b/0x120 [ 491.116907][T17781] ? cp_new_stat+0x5f0/0x5f0 [ 491.121552][T17781] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 491.127038][T17781] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 491.132523][T17781] ? do_syscall_64+0x26/0x790 [ 491.137229][T17781] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 491.143319][T17781] ? do_syscall_64+0x26/0x790 [ 491.148020][T17781] ? lockdep_hardirqs_on+0x421/0x5e0 [ 491.153340][T17781] __x64_sys_newfstat+0x54/0x80 [ 491.158223][T17781] do_syscall_64+0xfa/0x790 [ 491.162884][T17781] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 491.168794][T17781] RIP: 0033:0x45c6b9 06:01:19 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:19 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d0a) 06:01:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x2}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 491.172701][T17781] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 491.192322][T17781] RSP: 002b:00007fe351b7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 491.200757][T17781] RAX: ffffffffffffffda RBX: 00007fe351b7c6d4 RCX: 000000000045c6b9 [ 491.208753][T17781] RDX: 0000000000000000 RSI: 00000000200014c0 RDI: 0000000000000003 [ 491.216743][T17781] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 491.224733][T17781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 491.232717][T17781] R13: 00000000000000e4 R14: 00000000004c3548 R15: 0000000000000003 [ 491.271919][T17781] ERROR: Out of memory at tomoyo_realpath_from_path. 06:01:19 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x50) [ 491.365962][T17809] validate_nla: 2 callbacks suppressed [ 491.365973][T17809] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:19 executing program 0 (fault-call:6 fault-nth:4): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000014c0)) 06:01:19 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x4b49, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:19 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x50) 06:01:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x2}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:19 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 491.826522][T17825] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 491.845913][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 491.845930][ T26] audit: type=1804 audit(1582005679.807:253): pid=17828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/326/bus" dev="sda1" ino=16849 res=1 [ 491.966070][T17834] FAULT_INJECTION: forcing a failure. [ 491.966070][T17834] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 491.979329][T17834] CPU: 1 PID: 17834 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 [ 491.988015][T17834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.998090][T17834] Call Trace: [ 492.001396][T17834] dump_stack+0x197/0x210 [ 492.005754][T17834] should_fail.cold+0x5/0xd [ 492.010293][T17834] ? fault_create_debugfs_attr+0x140/0x140 [ 492.016176][T17834] should_fail_alloc_page+0x50/0x60 [ 492.021397][T17834] __alloc_pages_nodemask+0x1a1/0x910 [ 492.026794][T17834] ? __kasan_check_read+0x11/0x20 [ 492.031845][T17834] ? __alloc_pages_slowpath+0x2900/0x2900 [ 492.037587][T17834] ? __kasan_check_read+0x11/0x20 [ 492.042657][T17834] cache_grow_begin+0x90/0xc60 [ 492.047446][T17834] ? trace_hardirqs_off+0x62/0x240 [ 492.052576][T17834] __kmalloc+0x6b2/0x770 [ 492.056825][T17834] ? mark_held_locks+0xf0/0xf0 [ 492.061606][T17834] ? tomoyo_realpath_from_path+0xc5/0x660 [ 492.067360][T17834] tomoyo_realpath_from_path+0xc5/0x660 [ 492.072919][T17834] ? tomoyo_path_perm+0x1cb/0x430 [ 492.077983][T17834] tomoyo_path_perm+0x230/0x430 [ 492.082858][T17834] ? tomoyo_path_perm+0x1cb/0x430 [ 492.087901][T17834] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 492.093976][T17834] ? avc_has_perm_noaudit+0x570/0x570 [ 492.099382][T17834] ? ___might_sleep+0x163/0x2c0 [ 492.104277][T17834] ? selinux_file_permission+0x580/0x580 [ 492.109927][T17834] ? tomoyo_path_perm+0x24e/0x430 [ 492.114969][T17834] tomoyo_inode_getattr+0x1d/0x30 [ 492.120010][T17834] security_inode_getattr+0xf2/0x150 [ 492.125319][T17834] vfs_getattr+0x25/0x70 [ 492.129582][T17834] ovl_getattr+0x180/0xd80 [ 492.134023][T17834] ? ovl_setattr+0x8b0/0x8b0 [ 492.138626][T17834] ? ___might_sleep+0x163/0x2c0 [ 492.143520][T17834] ? selinux_file_permission+0x580/0x580 [ 492.149196][T17834] vfs_getattr_nosec+0x1f7/0x290 [ 492.154149][T17834] ? ovl_setattr+0x8b0/0x8b0 [ 492.158763][T17834] vfs_getattr+0x4b/0x70 [ 492.163019][T17834] vfs_statx_fd+0x71/0xc0 [ 492.167385][T17834] __do_sys_newfstat+0x9b/0x120 [ 492.172252][T17834] ? cp_new_stat+0x5f0/0x5f0 [ 492.176912][T17834] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 492.182396][T17834] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 492.187880][T17834] ? do_syscall_64+0x26/0x790 [ 492.192672][T17834] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 492.198760][T17834] ? do_syscall_64+0x26/0x790 [ 492.203457][T17834] ? lockdep_hardirqs_on+0x421/0x5e0 [ 492.208768][T17834] __x64_sys_newfstat+0x54/0x80 [ 492.213630][T17834] do_syscall_64+0xfa/0x790 [ 492.218165][T17834] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 492.224073][T17834] RIP: 0033:0x45c6b9 [ 492.227975][T17834] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 492.247588][T17834] RSP: 002b:00007fe351b7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 492.256021][T17834] RAX: ffffffffffffffda RBX: 00007fe351b7c6d4 RCX: 000000000045c6b9 06:01:20 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d0c) [ 492.264016][T17834] RDX: 0000000000000000 RSI: 00000000200014c0 RDI: 0000000000000003 [ 492.272012][T17834] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 492.279997][T17834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 492.287979][T17834] R13: 00000000000000e4 R14: 00000000004c3548 R15: 0000000000000004 06:01:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x2}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:20 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)) clone3(0x0, 0x0) 06:01:20 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 492.319254][ T26] audit: type=1804 audit(1582005680.027:254): pid=17835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/305/bus/file0" dev="overlay" ino=16740 res=1 [ 492.444169][ T26] audit: type=1804 audit(1582005680.397:255): pid=17843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/305/bus/bus/file0" dev="overlay" ino=16520 res=1 06:01:20 executing program 0 (fault-call:6 fault-nth:5): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000014c0)) [ 492.581642][T17855] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:20 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)) clone3(0x0, 0x0) 06:01:20 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x4c01, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 492.630031][ T26] audit: type=1804 audit(1582005680.467:256): pid=17839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/305/bus/bus/file0" dev="overlay" ino=16520 res=1 06:01:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 492.846061][ T26] audit: type=1804 audit(1582005680.487:257): pid=17848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/327/bus" dev="sda1" ino=16547 res=1 [ 492.881411][T17863] FAULT_INJECTION: forcing a failure. [ 492.881411][T17863] name failslab, interval 1, probability 0, space 0, times 0 06:01:20 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)) clone3(0x0, 0x0) 06:01:21 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 493.074423][T17863] CPU: 1 PID: 17863 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 [ 493.083153][T17863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.093228][T17863] Call Trace: [ 493.096545][T17863] dump_stack+0x197/0x210 [ 493.100904][T17863] should_fail.cold+0x5/0xd [ 493.105437][T17863] ? fault_create_debugfs_attr+0x140/0x140 [ 493.111266][T17863] ? ___might_sleep+0x163/0x2c0 [ 493.116152][T17863] __should_failslab+0xb7/0x100 [ 493.121022][T17863] should_failslab+0x9/0x14 [ 493.125541][T17863] __kmalloc+0x2e0/0x770 [ 493.129803][T17863] ? tomoyo_unix_entry.cold+0x16/0x16 [ 493.135194][T17863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 493.141447][T17863] ? d_absolute_path+0x11b/0x170 [ 493.146406][T17863] ? tomoyo_encode2.part.0+0xf5/0x400 [ 493.151814][T17863] tomoyo_encode2.part.0+0xf5/0x400 [ 493.157047][T17863] tomoyo_encode+0x2b/0x50 [ 493.159263][ T26] audit: type=1804 audit(1582005681.037:258): pid=17872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/327/bus" dev="sda1" ino=16547 res=1 [ 493.161497][T17863] tomoyo_realpath_from_path+0x19c/0x660 [ 493.194596][T17863] ? tomoyo_path_perm+0x1cb/0x430 [ 493.199648][T17863] tomoyo_path_perm+0x230/0x430 [ 493.204516][T17863] ? tomoyo_path_perm+0x1cb/0x430 [ 493.209577][T17863] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 493.215666][T17863] ? avc_has_perm_noaudit+0x570/0x570 [ 493.221072][T17863] ? ___might_sleep+0x163/0x2c0 [ 493.225968][T17863] ? selinux_file_permission+0x580/0x580 [ 493.231626][T17863] ? tomoyo_path_perm+0x24e/0x430 [ 493.237117][T17863] tomoyo_inode_getattr+0x1d/0x30 [ 493.242173][T17863] security_inode_getattr+0xf2/0x150 [ 493.247489][T17863] vfs_getattr+0x25/0x70 [ 493.251763][T17863] ovl_getattr+0x180/0xd80 [ 493.256214][T17863] ? ovl_setattr+0x8b0/0x8b0 [ 493.260812][T17863] ? ___might_sleep+0x163/0x2c0 [ 493.265716][T17863] ? selinux_file_permission+0x580/0x580 [ 493.271381][T17863] vfs_getattr_nosec+0x1f7/0x290 [ 493.276338][T17863] ? ovl_setattr+0x8b0/0x8b0 [ 493.280944][T17863] vfs_getattr+0x4b/0x70 [ 493.285213][T17863] vfs_statx_fd+0x71/0xc0 [ 493.289567][T17863] __do_sys_newfstat+0x9b/0x120 [ 493.294559][T17863] ? cp_new_stat+0x5f0/0x5f0 [ 493.299190][T17863] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 493.304683][T17863] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 493.310159][T17863] ? do_syscall_64+0x26/0x790 [ 493.314957][T17863] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 493.321036][T17863] ? do_syscall_64+0x26/0x790 [ 493.325736][T17863] ? lockdep_hardirqs_on+0x421/0x5e0 [ 493.331054][T17863] __x64_sys_newfstat+0x54/0x80 [ 493.335930][T17863] do_syscall_64+0xfa/0x790 [ 493.340460][T17863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 493.346358][T17863] RIP: 0033:0x45c6b9 [ 493.350270][T17863] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:01:21 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:21 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x50) 06:01:21 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d0f) [ 493.369890][T17863] RSP: 002b:00007fe351b7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 493.378319][T17863] RAX: ffffffffffffffda RBX: 00007fe351b7c6d4 RCX: 000000000045c6b9 [ 493.386307][T17863] RDX: 0000000000000000 RSI: 00000000200014c0 RDI: 0000000000000003 [ 493.394282][T17863] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 493.402264][T17863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 493.410251][T17863] R13: 00000000000000e4 R14: 00000000004c3548 R15: 0000000000000005 [ 493.474739][ T26] audit: type=1804 audit(1582005681.437:259): pid=17871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/306/bus/file0" dev="overlay" ino=16483 res=1 [ 493.564578][T17863] ERROR: Out of memory at tomoyo_realpath_from_path. [ 493.616907][ T26] audit: type=1804 audit(1582005681.437:260): pid=17884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/328/bus" dev="sda1" ino=16689 res=1 [ 493.654945][T17882] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:21 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x50) 06:01:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:21 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x541b, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 493.770220][ T26] audit: type=1804 audit(1582005681.607:261): pid=17890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/306/bus/bus/file0" dev="overlay" ino=16818 res=1 [ 493.884378][ T26] audit: type=1804 audit(1582005681.777:262): pid=17894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/328/bus" dev="sda1" ino=16689 res=1 06:01:21 executing program 0 (fault-call:6 fault-nth:6): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000014c0)) 06:01:21 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d10) [ 494.144769][T17906] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:22 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x50) 06:01:22 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d1c) 06:01:22 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x5421, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:22 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:22 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000014c0)) 06:01:22 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 494.725192][T17929] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:22 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40de0) 06:01:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x2}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:23 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) 06:01:23 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:23 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40df0) 06:01:23 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x5423, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 495.221671][T17955] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:23 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) getresuid(&(0x7f0000000140)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) lchown(&(0x7f00000000c0)='./file1\x00', r0, 0xee01) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000300)={0x80f, 0x8, 0x0, 'queue0\x00', 0x87d6}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r2, &(0x7f00000014c0)) 06:01:23 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) 06:01:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x2}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:23 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0}, 0x50) [ 495.745158][T17982] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:23 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x2}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:23 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0xffffffff000) 06:01:23 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0}, 0x50) 06:01:23 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x5450, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 496.088586][T17998] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:24 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0}, 0x50) 06:01:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:24 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x50) 06:01:24 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c746f6b6469723d2e2f66696c583786417468823e9d77eb3d2e2f66696c6530217354a373e5015317c243e848e8e9d08460f6d4615aae5582eb5acbc73964e45dcb570ecdedd30c748bc28ed6600129d2fedf299426ce086aa7cea24efaddc5853d58290850be1936e423809917479115ba8c404e2cdb86fd00"]) chdir(&(0x7f00000002c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0xc0) chdir(&(0x7f00000000c0)='./file1\x00') creat(&(0x7f0000000140)='./bus\x00', 0xb8) acct(&(0x7f0000000340)='./file0\x00') pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfffffe3e) fstat(r0, &(0x7f00000001c0)) 06:01:24 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 496.532093][T18017] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:24 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x5451, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:24 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:24 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x50) [ 496.864559][T18032] overlayfs: unrecognized mount option "tokdir=./filX7Ath>w=./file0!sTsSCHЄ`aZUZ9d]W tŽ`))&j΢NŅ=X)P6#G@N" or missing value [ 496.888664][T18033] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 496.948155][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 496.948173][ T26] audit: type=1804 audit(1582005684.907:278): pid=18038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/333/bus" dev="sda1" ino=16536 res=1 06:01:25 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000a40)=0x8000000) mkdir(0x0, 0x0) chdir(0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) statx(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x6000, 0x7ff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0xfffffe3e) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@mcast1, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000900)=0xe8) stat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000100)='./bus\x00', 0x5, 0x6, &(0x7f0000000640)=[{&(0x7f0000000240)="952871983aa694b4a224c3bfb6d8eacd1b08558310604ba5fd40e45079177073b363fcb2a29407cf5373dbc0a535dd646d7b44a4ad9adbf29591b635756e15431b2c5f06484413fd62382561ec0345c8a249d4ca049191a5403a84835d636d37bbacc7af5485ab6849d892143db54a5b31edfcc263f45d68c31f77e17a18af390c15930c97feeefb7df10e6a4d9b7e2625c1dd115a3d28afbea2bafb88fdbdef87ab9a842760155365458f84ba664699d034b0a522889d3bde1b640cbdb503d220989a", 0xc3, 0x5}, {&(0x7f0000000140)="3f32608fe9b0b3fbb0062cb4dad711ed1aa97b09fa029f17005ee6ef377e7325afcad89bf1ec7fbafa4a87e79ea23a2cabbfac4aaed4505ad3f5f1ddfe4cdadb7edd95c519eab098a4fa1010d79f6bfa6978d7cfcdf9186c7a", 0x59, 0x1}, {&(0x7f00000001c0)="110b5b4b3a3f", 0x6, 0x3}, {&(0x7f0000000340)="5d5ff46197518de108a77c99b9a07e5945cef125f616a85b7101a1be7604fbbb082892960c32fce7d19b38934a7ae7d8d3d1c34c970b8b79c85e1f2e847da406729da076de267e92f4fc4f3906690ad296987b0be82688ad12e7fea307b4f084bcb77c0fc45d10d7af05ef25c22051056220c239b86ed1bac8f3ea0d68eda83400d4da009332002f4a1a11de2c9204d68ae3001bf078985499579b8ddab5b39ca6a9f3103ed93ab7a454878f3f7214ef2c450e47501cb77360536a35f0de1015dd462c52a0f8d9a0e39e7731b0b8af32cfb634cdd52c968f5d4a4a8cea3bbd86a8047058a27dbe129caa68e1f1", 0xed, 0x80000000}, {&(0x7f00000004c0)="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", 0xfe, 0x8}, {&(0x7f00000005c0)="6e0da6d39f81a329513288f8f2b298f2435924337e2ab9ad213ee0ae1288191825173e65e92130ad60fd718a341ee19ff6670f04f425e64cc07c5245ca1c883e6e4a0af5391b599764291cb216e26f5452f62a453dccdc25c16f", 0x5a, 0x3f}], 0x2200034, &(0x7f0000000a80)=ANY=[@ANYBLOB="6e311bcf4739774b08d3766f696e6c696e655f010000000000dc0e8d826769643d", @ANYRESHEX=r2, @ANYBLOB=',whint_mode=user-based,fowner<', @ANYRESDEC=0xee01, @ANYBLOB=',fsuuid=Qef66e58-64\x000-6f6f-ee\x004-6abb09b1,seclabel,fowner>', @ANYRESDEC=r4, @ANYBLOB=',smackfsroot=ppp0-.proc,\x00']) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) ioctl$CAPI_GET_MANUFACTURER(r5, 0xc0044306, &(0x7f0000000b80)=0x1000) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r6, 0x0, 0x40d09) 06:01:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 497.113424][ T26] audit: type=1804 audit(1582005684.987:279): pid=18037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/333/bus" dev="sda1" ino=16536 res=1 [ 497.183958][T18051] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000100001045393", @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:25 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x50) [ 497.211398][ T26] audit: type=1804 audit(1582005685.117:280): pid=18045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/311/bus/file0" dev="overlay" ino=16551 res=1 06:01:25 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:25 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x5452, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 497.419035][T18062] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 497.455956][ T26] audit: type=1804 audit(1582005685.167:281): pid=18053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/311/bus/bus/file0" dev="overlay" ino=16753 res=1 06:01:25 executing program 0: mkdir(&(0x7f0000000340)='./file1/file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r1 = dup2(r0, 0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, 0x1, 0x4, 0x801, 0x0, 0x0, {0x48dfe7a9db3d04, 0x0, 0x9}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x78c}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x840) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r2, &(0x7f00000014c0)) 06:01:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000100001045393", @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:25 executing program 3: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0xffffffff000) [ 497.646883][ T26] audit: type=1804 audit(1582005685.207:282): pid=18052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/311/bus/bus/file0" dev="overlay" ino=16753 res=1 06:01:25 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 497.792778][T18078] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 497.853557][ T26] audit: type=1804 audit(1582005685.557:283): pid=18065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/334/bus" dev="sda1" ino=16625 res=1 06:01:25 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x5460, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000100001045393", @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 498.015434][T18090] overlayfs: failed to resolve './file1': -2 [ 498.029605][ T26] audit: type=1804 audit(1582005685.817:284): pid=18081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir991788372/syzkaller.xRAgmo/313/bus" dev="sda1" ino=16516 res=1 [ 498.233140][T18098] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 498.251467][ T26] audit: type=1804 audit(1582005685.857:285): pid=18080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/312/bus/file0" dev="overlay" ino=16521 res=1 [ 498.506053][ T26] audit: type=1804 audit(1582005685.937:286): pid=18092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/312/bus/file0" dev="overlay" ino=16521 res=1 06:01:26 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11) lseek(r0, 0x10000, 0x2) sendfile(r0, r1, 0x0, 0x40d09) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) 06:01:26 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010453930000000000", @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 498.603669][ T26] audit: type=1804 audit(1582005686.557:287): pid=18101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/313/bus/file0" dev="overlay" ino=16533 res=1 06:01:26 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:26 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x6364, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 498.772142][T18108] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:26 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f646b6469723d2e2fe09148e9d961f3a67065726469723d2e2f66696c6530"]) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000014c0)) 06:01:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010453930000000000", @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:27 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477c") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:27 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f00000000c0)="dd764a973a66551fe2a106bf0510ac9b5c08cf19becba5c5d0a4f6be56daa09c03abf9ade2e0d2ca167cba30141d25aa938d6f3e93fa262a522abf58dca11f397d16b37b2a1adf23db009b416267fdeeaa40d76aac4817515aa7136c05986f8fa8334b22e6b1b7de0abe2b4ef4ce91e79ee5434344302b8a6db83c99af49092146ce50ebb3f6ffa442ff13e3a4b7cf5035eb8232cffd96863f9e9b1b07c55e61d430e212e1be02918a1e92f61242739d30dde0f85356f961954824b4feb53b6574e6795e27be3a5966") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) [ 499.200574][T18131] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 499.210877][T18130] overlayfs: unrecognized mount option "wodkdir=./Haperdir=./file0" or missing value 06:01:27 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477c") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010453930000000000", @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:27 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f62757346776f726b6469723d2e2f66696c2f66696c653000000000000000000000000000847c3621f81c6de6c4b1fd56ffd70acb11e3939ea1afc61206d57c8a0d872795f237071b6c23fa6e922c63e554f1f04919052969e6adb6c08b6fd71f11ea6b611bfbecef4fc578089ad8428b9879f616881de9e188cc7f2ed4d7642171df1a618d8cd447fbf80bfe12aaad018ea84706d8d76311b70cdd8f4f1a2b8e546c90e68dad9d1e5ea428cc84e35f066015db1477"]) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./bus\x00') socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000014c0)) 06:01:27 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x6609, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 499.661744][T18151] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010453930000000000000000", @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 499.792470][T18154] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 499.882458][T18157] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 06:01:27 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 499.938429][T18161] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:27 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477c") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:27 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = getpid() ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000400)=""/63, 0x3f}) r1 = syz_open_procfs(r0, &(0x7f00000003c0)='net/if_inet6\x00') setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000400)=0x7c00, 0x4) chdir(&(0x7f00000002c0)='./bus\x00') r2 = syz_open_dev$usbmon(0x0, 0x0, 0x48000) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r3, r4, 0x0, r4, 0x0, 0xb}, 0x0, 0xffc, 0x3, 0x0, 0x0, 0x0, 0x81}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) lchown(&(0x7f00000000c0)='./bus\x00', r3, r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r6, &(0x7f00000014c0)) 06:01:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010453930000000000000000", @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:28 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x7fffffff, 0x40, {0xffffffffffffffff}, {0x0}, 0x80000001, 0x4c}) setxattr$security_capability(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x4, 0x401}, {0x9}], r1}, 0x18, 0x1) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r2, 0x0, 0x40d09) 06:01:28 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x8912, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:28 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010453930000000000000000", @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 500.490850][T18182] overlayfs: filesystem on './file0' not supported as upperdir 06:01:28 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r3, 0x78d}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r9, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x4c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x1c, 0x2, [@TCA_CGROUP_ACT={0x18, 0x3, [@m_ct={0x14, 0x0, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x4c}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001900)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000001a00)=0xe8) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r17 = getpid() ptrace(0x10, r17) ptrace$getregset(0x4205, r17, 0x202, &(0x7f0000000080)={&(0x7f0000000400)=""/63, 0x3f}) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f0000001b80)=ANY=[@ANYRES64=r17], @ANYRES32=r16, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r16, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x4c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x1c, 0x2, [@TCA_CGROUP_ACT={0x18, 0x3, [@m_ct={0x14, 0x0, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000001b00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002dbd7000ffdbdf25010000000cec980059b67934040000000c0099003ef8000002000000080001000100000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="0c009900d9ff00000300000008000300", @ANYRES32=r16, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x40080) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000100)) chdir(&(0x7f00000002c0)='./bus\x00') syz_mount_image$ocfs2(&(0x7f00000000c0)='ocfs2\x00', &(0x7f0000001b40)='./file1\x00', 0x86, 0x6, &(0x7f0000001640)=[{&(0x7f0000001780)="3d1f6744c56ecc934972ab8a3944749c2ddd5dbcccb5943d32002f1e2449b9a365e061e177efca0abe6d19e1c659cc5ea51a550a1812f5ab05f7fd910b89d5ee4f26008deb2130dc0612be00dd8f53687c95a0081519a181a1774e3704b4bd82a6ae3d422313eeab036140666831d98d91250e8199b495f88991bf8f68957c4f0efb7b8594d0f0a704f942656c6bfecf243e49edf6a618f52d01e569e24cd0050bc748272dce81264de27f35e654771a8b5849e257b699e899357263107b0b6f773c515345b2facd38040607686409397b777c4906a9d5fbf2ae184214bf6832de3521db6601be7c1f527f8722ce30f2dbfad876b3803c9f7ae6805d966c5855c7b7b9b75ecef533188cd42626696eb7266e7ec09c6bd3c9b2f4a8d24e0e01d75b3db56f8a8e145809f5db86ab57f34e82235da5719a5a32a1665b18eeeeed4f1870e22ba449b3abd153357c9ca832d1ff3b5f7dc476884f510d2dfaadcdf0a34ebbd1c0f7", 0x165, 0x48b}, {&(0x7f00000001c0)="433ecfa09ed9b4e8f51f38826073b6054028212b33f4ae35e069a57e254ffbf604fad9d12cb4088b10acd41856223140bcfccda48860082fc96bb05306fa00ea7702c4c34ad64596855ef94c1436ad2865ea223b983217bf43571636f34a", 0x5e, 0x9}, {&(0x7f00000003c0)="5ac0c91da840711768d0b3458b4b5b516e5980e93c929b837b24edba1720395f906a0eb040d50e7c218592fffc1665e9d81636ce4c66d58fa486c4d85550c2384bb179db0efe24a7248cfbaf28f950a59cc1ead274a0bdfd04e78f3f3a7763d1279ff8eb95cc85e798a82a1a4b0113df7cdb674d1dab693b7ab78d8fca75c5e4f558bfc6f4d1b4ecc840ae6fce1073eb9356a16fa90935aa2c1bda0333cf88010689e3f0ff79f4998aa96877469f0cae3c45e9ab3af1242c8c2fe7b1e25ee10898de43af8b4fc3de2d9d17d415557443b08b6fd7699a5b7f6aacc87afe8a546bca6b38", 0xe3, 0x7fff}, {&(0x7f00000004c0)="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", 0x1000, 0x81}, {&(0x7f0000001540)="942917b66f576fe9f53b87d20b36e2dc77885389a6a0bb32306ce8fd3e6e92ec6086f9a7e7fdc686a7914e36348ad128f86d5b02493781e7b37d5c9b274554d8deec75ed8bdc3d66063456b64f4636a176482b923c1c48fa09a5fdcd72e54ea833ebe8d409be8f23a4a7cbb5e356f1bba394228dd2511364b9fbb7107601e44bd4a7f1317b773913dfa023d3710c6dd3baa13a97446e37037395811c6a855fb1c1c7a81950809b718b6473a81e8e6fae9db27f3493778be239d56ff3f5", 0xbd, 0x7ff}, {&(0x7f0000001600)="b2d8b778672b3a39c1d35216e7b5edc5280246cc407f4b0e984e09c50bb35da3a8c6", 0x22, 0x1ff}], 0x10010, &(0x7f0000001700)='overlay\x00') r18 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000340)=0xe4, 0x4) fanotify_mark(r18, 0x4, 0x23, r18, &(0x7f0000001740)='./file0\x00') fstat(r18, &(0x7f00000014c0)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r19, &(0x7f0000000100)=ANY=[], 0xfffffe3e) setsockopt$TIPC_SRC_DROPPABLE(r19, 0x10f, 0x80, &(0x7f0000000000)=0x7fff, 0x4) 06:01:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000100001045393000000000000000000", @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:28 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:01:28 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x6609, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 500.962850][T18203] overlayfs: missing 'lowerdir' 06:01:29 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x8933, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000100001045393000000000000000000", @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 501.211678][T18211] (syz-executor.0,18211,0):ocfs2_parse_options:1449 ERROR: Unrecognized mount option "overlay" or missing value 06:01:29 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000100001045393000000000000000000", @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 501.364406][T18211] (syz-executor.0,18211,1):ocfs2_fill_super:1175 ERROR: status = -22 06:01:29 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:29 executing program 3: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f00000000c0)="dd764a973a66551fe2a106bf0510ac9b5c08cf19becba5c5d0a4f6be56daa09c03abf9ade2e0d2ca167cba30141d25aa938d6f3e93fa262a522abf58dca11f397d16b37b2a1adf23db009b416267fdeeaa40d76aac4817515aa7136c05986f8fa8334b22e6b1b7de0abe2b4ef4ce91e79ee5434344302b8a6db83c99af49092146ce50ebb3f6ffa442ff13e3a4b7cf5035eb8232cffd96863f9e9b1b07c55e61d430e212e1be02918a1e92f61242739d30dde0f85356f961954824b4feb53b6574e6795e27be3a5966") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:01:29 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x40045431, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 501.726084][T18244] validate_nla: 4 callbacks suppressed [ 501.726093][T18244] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:29 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) open_tree(r3, &(0x7f0000000100)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:01:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:29 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89f") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:30 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r1, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xed5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c005}, 0x20000800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r6, &(0x7f00000014c0)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0xfffffe3e) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4100, 0x0) r10 = getpid() ptrace(0x10, r10) ptrace$getregset(0x4205, r10, 0x202, &(0x7f0000000080)={&(0x7f0000000400)=""/63, 0x3f}) write$P9_RGETLOCK(r0, &(0x7f0000000500)={0x26, 0x37, 0x1, {0x1, 0x7, 0x1, r10, 0x8, 'batadv0\x00'}}, 0x26) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000240)={r8, 0xeb, "a3f7266a471c1421b241757a75c4b19b2271f6e55cb7030c6ef1c5dda799bf2e4ea055240ac9e93812da44b1e82858e360847553427f39ec36947d01646d4067df19c9365bcd539c1cfb1ea2a82c3f40de8e199f25520b66d4d5c53831137e857561da2e7186e11363158f7a4f958cf72aab0257f15ec50b09c761e299fda2d52707aad4207bfd835c639642a5d35252c4db2f2ae2bc0cdb06d44be7094f7476ad2cb50e85cc9ad26fa8016a0d921bc9945da79b6414fe46eee60d493119b8e440f5cb3a43eda6bb4ff565a61c8a5328a2027066cae2d951b8b17f26806e143e67690a17efbedbe7278318"}, &(0x7f00000000c0)=0xf3) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={r8, 0x0, 0x20}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000000c0)={r8, 0xffff8001}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=r11, @ANYBLOB="f60000006bed5b6cbedb95a34bf143b475799bd582bb6b3d215c403cf695331e1a5119b14489edd8cced04a343f4c09118e17b25355596f15b3239e3416f9ebcc27bfcd295d3cec45e3fbf9ca13751d3592ac8f587d195c1560a1bd34c3616effba3f813e89daba15ce0c8eba72da4df4884115257d0087ad0f36fd629f4faf4581f8eb06e5a8ab9bca786392ee43ab4a6d47d0f71fdc1b8fb27c37b6d775bde8ad86066e8be23a81f840178825ad35f1ac518efa1d24e58007ae195aa5368e17b9045cfdcbb45353b7fb71554eb5f897833627a10f73b00bd44331af47a20e91356a929228a657ee1c3ea0ee9cec035f1d48fb845b05ec7552c"], &(0x7f00000001c0)=0xfe) [ 502.163348][T18261] device bridge132 entered promiscuous mode [ 502.170131][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 502.170148][ T26] audit: type=1804 audit(1582005690.127:305): pid=18255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/318/bus/file0" dev="sda1" ino=16835 res=1 06:01:30 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89f") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 502.222697][T18267] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 502.241755][T18267] device bridge132 left promiscuous mode [ 502.271724][ T26] audit: type=1804 audit(1582005690.157:306): pid=18263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/339/bus" dev="sda1" ino=17010 res=1 [ 502.324518][ T26] audit: type=1804 audit(1582005690.247:307): pid=18259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/318/bus/file0" dev="sda1" ino=16835 res=1 06:01:30 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x400454ca, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:30 executing program 3: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f00000000c0)="dd764a973a66551fe2a106bf0510ac9b5c08cf19becba5c5d0a4f6be56daa09c03abf9ade2e0d2ca167cba30141d25aa938d6f3e93fa262a522abf58dca11f397d16b37b2a1adf23db009b416267fdeeaa40d76aac4817515aa7136c05986f8fa8334b22e6b1b7de0abe2b4ef4ce91e79ee5434344302b8a6db83c99af49092146ce50ebb3f6ffa442ff13e3a4b7cf5035eb8232cffd96863f9e9b1b07c55e61d430e212e1be02918a1e92f61242739d30dde0f85356f961954824b4feb53b6574e6795e27be3a5966") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) [ 502.805740][ T26] audit: type=1804 audit(1582005690.767:308): pid=18283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/319/bus/file0" dev="overlay" ino=16488 res=1 06:01:30 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f00000000c0)={0x8, 0x2, 'client1\x00', 0xffffffff80000001, "9c21c10a75f9d19d", "c27868f698ee2d4e6acb947f55b07a0dea33b41b4a2a7d37f0162a9cac8ce58c", 0xfffffff7, 0x1f}) 06:01:30 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89f") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 502.976838][ T26] audit: type=1804 audit(1582005690.927:309): pid=18293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir991788372/syzkaller.xRAgmo/318/bus" dev="sda1" ino=16645 res=1 06:01:30 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x40049409, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:31 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='memory.events\x00', &(0x7f0000000140)='./bus\x00', r1) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7740726469723d2e2f6275732c776f726b64855f69723d2e2f66696c65312c75707065726469723d2e2f66696e"]) chdir(&(0x7f00000002c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r2, &(0x7f00000014c0)) [ 503.021964][T18295] device bridge133 entered promiscuous mode [ 503.079171][T18295] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 503.107409][T18295] device bridge133 left promiscuous mode [ 503.156371][ T26] audit: type=1804 audit(1582005691.117:310): pid=18300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/340/bus" dev="sda1" ino=16517 res=1 [ 503.436651][ T26] audit: type=1804 audit(1582005691.397:311): pid=18309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/320/bus/file0" dev="sda1" ino=16674 res=1 [ 503.437870][T18307] overlayfs: failed to resolve './bus': -2 [ 503.505660][T18314] overlayfs: unrecognized mount option "low@rdir=./bus" or missing value 06:01:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00", @ANYRES32=r5, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/169], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:31 executing program 3: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f00000000c0)="dd764a973a66551fe2a106bf0510ac9b5c08cf19becba5c5d0a4f6be56daa09c03abf9ade2e0d2ca167cba30141d25aa938d6f3e93fa262a522abf58dca11f397d16b37b2a1adf23db009b416267fdeeaa40d76aac4817515aa7136c05986f8fa8334b22e6b1b7de0abe2b4ef4ce91e79ee5434344302b8a6db83c99af49092146ce50ebb3f6ffa442ff13e3a4b7cf5035eb8232cffd96863f9e9b1b07c55e61d430e212e1be02918a1e92f61242739d30dde0f85356f961954824b4feb53b6574e6795e27be3a5966") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:01:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x40086602, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:31 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb3") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 503.820256][ T26] audit: type=1804 audit(1582005691.777:312): pid=18321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir991788372/syzkaller.xRAgmo/319/bus" dev="sda1" ino=16645 res=1 06:01:31 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) [ 504.027937][T18328] device bridge134 entered promiscuous mode [ 504.065980][T18334] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 504.127455][ T26] audit: type=1804 audit(1582005692.087:313): pid=18331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/321/bus/file0" dev="overlay" ino=16849 res=1 [ 504.167515][T18334] device bridge134 left promiscuous mode 06:01:32 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) sendto$x25(r1, &(0x7f0000000300)="e4e0506c951b5379089587bc7ea49962e0581e54f1b0979e49d1779b3eaf4553651f881c80d857d1ab79baaed06991935d91445fb173bd251bdb357ca365668d07b22034910ed5e54d6a2ea6fe9ca1374902cab3d24a147f8802eca5dcff1fbb857ec0e573520d9a097faae1d3f067020d2a46a99a96e77b323ae2da16dadb2d62371f1427f39191d719d6c34aa829b93376c16bcf3ae3ac45d498e9b84870f49f228b24bb9a6db899a97fa6cc6915f9fed814474261ccf6bff73aeba702e28c9844", 0xc2, 0x20000011, &(0x7f0000000140)={0x9, @null=' \x00'}, 0x12) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) write$9p(r2, &(0x7f00000001c0)="9897c55a000581be7df55ba9d78b2174daacf1c69d434df0362742269e072510429029e4e2b6b8eb988df6d55ab1477b67", 0x31) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x10008, &(0x7f0000000440)={[{@xino_on='xino=on'}, {@default_permissions='default_permissions'}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@xino_auto='xino=auto'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, ' \x00'}}]}) fstat(r0, &(0x7f00000014c0)) [ 504.340839][ T26] audit: type=1804 audit(1582005692.127:314): pid=18336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/341/bus" dev="sda1" ino=16929 res=1 06:01:32 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x40087602, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:32 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb3") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:32 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(0x0, 0x0) chdir(0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r3 = open$dir(&(0x7f0000000100)='./bus\x00', 0x280000, 0x82) renameat2(r2, &(0x7f00000000c0)='./bus\x00', r3, &(0x7f0000000140)='./bus\x00', 0x4) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f0000000180)="ace3346e9aac75b75fcc23d8f00a54a970995b1c6ce653cf5ee1", 0x1a, 0x1, &(0x7f0000000280)=@nfc={0x27, 0x0, 0x0, 0x5}, 0x80) lseek(r1, 0x0, 0x2) sendfile(r1, r4, 0x0, 0x40d09) 06:01:32 executing program 3: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:01:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:33 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x40186366, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 505.022984][T18372] device bridge135 entered promiscuous mode [ 505.154008][T18373] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:33 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000440)=""/147, 0xc4}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r3, &(0x7f00000014c0)) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0', [{0x20, 'GPL-userGPL'}, {0x20, 'memory.events\x00'}, {0x20, '\x0e'}, {0x20, 'memory.events\x00'}, {0x20, 'overlay\x00'}, {0x20, 'overlay\x00'}, {}], 0xa, "dfa2e35fd98f9d794c70a4bbc2f02f5e69d0a2b4d391fa9caa653d1199f90417958246cec29c91e3b2f05c4b0be8e351da6262f6a20246629bd2435dbacbcd3fc9d09b21401e9c6e1eec6d8140ba5582c357c016bcffa50604f1cb07d2749a332ac689561692538d2b8cb2db6372295d33080b716c8312c2a21e64fbc24999e79c378310efd2849eb5f3b5a31e81ae6c342df8588f0c5bee2630d2b68c3424a5fd0003a6865ab7f931c29f8cf177b03a6fc62c9ed8cde862ee9b1c187c5872c63bb6be"}, 0x10d) [ 505.194952][T18373] device bridge135 left promiscuous mode 06:01:33 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb3") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:33 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb3") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:33 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x8201, 0x0) sendmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="5793b371330e9b26789a1e5d0a9b1572e428d816e8bf80ca79b81cd9fbc8684389832a1e5364a9449a10af51a1d975870f55de0d3363013c047df43c0cbc4ae8c1d7fcb6c61949ab03f0efed40b612f5bed800", 0x53}, {&(0x7f0000000240)="1e86886c4be562d49d379b79a9df69d398036b6e019648433d39e0e709636cfaa77af6d5dd815827a07ca10c1da22f3b3ee0", 0x32}], 0x2, &(0x7f00000002c0)=[{0xa8, 0x10d, 0xfff, "8407e0a96220d3b50d253e3d54c55dce1216a07e85d5304b92271470c87eed0cbde7a32ec6725034702b98f3349f59e3d60861b720b82ae3122921e77da67f6a45b15e406656b924d2e90b3420b914b8519731e2238d714f2e308e8ee84b955526935a632ef8eba0857b48bac57e05847f2a3208bbb23b441084d8bb3a3130b16db61e5bfc2bf78eba618c19f152d02efa7f2d24"}, {0xd0, 0x84, 0x3, "af5bf051b9ad8ab8cf49eac82391c2313951376b07e65567798436dc6f3be162c6ddb698777547ec44284b8e959f3b47752c32c160d205a68bb7475c1f07273dd2838994685f732351f36b2ab5e9965a24726f654c94f6d5a41d5a824a6eb1b053aba43a8b78325d13e9dbfe8644790fb31ab4b22ada34e8cc54ca2f43024806f2780c7f2a91f4e9601f4d711292a7c218574113f77fa896252af803f661223b424624283a3223de81f87f0802c3ac9852639fb44b0ab61eb68547aad91688ca"}], 0x178}, 0x80) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x101880, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f0000000100)={0x27}) 06:01:33 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x4020940d, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:33 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:34 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:34 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb3") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 506.287187][T18409] device bridge136 entered promiscuous mode [ 506.354365][T18414] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:34 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x48000) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r2, r3, 0x0, r3, 0x0, 0xb}, 0x0, 0xffc, 0x3, 0x0, 0x0, 0x0, 0x81}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000140)='./bus\x00', 0x8, 0x2, &(0x7f0000000200)=[{&(0x7f0000000300)="e65f435fbdec7ff5551710664a44bfe97ab650a502f118708f0bb9f28baa4471ba39dede4865b5016e0f9f4bf986b96b1d087ead83952a80f9e33bb31f0fe4a09e73809e6fab5c402f09d49c371c5542a40e935211ab1bf7f2a5eb2aff2a624bc813057e76d5209ed8f159823cdea431f193aefd973507e5f40015075a597097e6a35bcfd21f378ebf47cb122e4afa4dd857b64fb3430999ef90630330ef5ee63d132b22d6be4dd9814e82df3dc51f381cd93d37d8d311343f34fed435c70f7ee98c556459b7df63e6dc51b7787a14bca5453eb9e4e24e60f9b655006b61f106c07b988a831c545a92f45d", 0xeb, 0x5}, {&(0x7f00000001c0)="c090b782da39a4fa45cc3ff488d2012a764d714bf93eff56280a9b89179c54f0", 0x20}], 0x3000422, &(0x7f0000000440)={[{@resize_auto='resize=auto'}, {@acl='acl'}, {@nolargeio='nolargeio'}, {@user_xattr='user_xattr'}, {@jdev={'jdev', 0x3d, './file1'}}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@noacl='noacl'}, {@data_ordered='data=ordered'}, {@hash_tea='hash=tea'}, {@data_ordered='data=ordered'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '^[md5sum\\cgroup!'}}, {@uid_gt={'uid>', r2}}, {@uid_eq={'uid', 0x3d, r4}}, {@subj_type={'subj_type'}}]}) fstat(r0, &(0x7f00000014c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000540)="ff23481c98cbee57382d198362189d821769353af6040f75c1d219ec7cc9a837336a365d57417f78e36275560469d5da3110a25621c22bcb68492a0e3802e8181065d36c9f6d855dcf3cfea2e9ba1bdb3bb7d849a71e73e2261f385ab06781811e2d0079eb2369e4ce12f0fd925ee5326b8ba8d08394a69e3ceebb666b8161093373f000adc0967fb669c5c95b2482a7f7fa6553ee6d0562a008f4fa430c5e9626f5032260fd4d8d03d54e6f9cecc7879e46090c54ca70a21db3bf3257c5857559ad2ca11bc402", &(0x7f00000006c0)="408792c9c748bbcf1202ffa5c631c15bd2c5386614a926eee63ad02dadd6db9ffbec508f26ae19d85e7c845bca9b1ccbb42a540690ba7950e8ba9c61f297cb6e0689e5e95004763a422b9291a6ab06437977cc3294a80732031120f165017dbea0845ed701370a7e0786b386279441cc616bb8bdae3f2eb66249116946df72a22d18c1f054dc7bc3beba2ca62d9827fa85941911da50f4b17488cb852bbed26c"}, 0x20) [ 506.406457][T18414] device bridge136 left promiscuous mode 06:01:34 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) faccessat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc, 0x800) sendfile(r0, r1, 0x0, 0x40d09) 06:01:34 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x80045430, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:34 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 506.851418][T18429] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 06:01:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:35 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x0, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:35 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(0x0, 0x0) chdir(0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r3 = open$dir(&(0x7f0000000100)='./bus\x00', 0x280000, 0x82) renameat2(r2, &(0x7f00000000c0)='./bus\x00', r3, &(0x7f0000000140)='./bus\x00', 0x4) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f0000000180)="ace3346e9aac75b75fcc23d8f00a54a970995b1c6ce653cf5ee1", 0x1a, 0x1, &(0x7f0000000280)=@nfc={0x27, 0x0, 0x0, 0x5}, 0x80) lseek(r1, 0x0, 0x2) sendfile(r1, r4, 0x0, 0x40d09) 06:01:35 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lmwerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000014c0)) 06:01:35 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x2000, 0x0) r1 = open$dir(&(0x7f0000000140)='./bus\x00', 0x10b002, 0x120) linkat(r0, &(0x7f0000000100)='./bus\x00', r1, &(0x7f0000000180)='./bus\x00', 0x1000) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) 06:01:35 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x800454d2, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 507.413786][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 507.413804][ T26] audit: type=1804 audit(1582005695.367:329): pid=18462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/345/bus" dev="sda1" ino=16485 res=1 [ 507.424911][T18457] device bridge137 entered promiscuous mode 06:01:35 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x0, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 507.614555][ T26] audit: type=1804 audit(1582005695.577:330): pid=18467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir991788372/syzkaller.xRAgmo/323/bus" dev="sda1" ino=16578 res=1 [ 507.643513][T18469] overlayfs: unrecognized mount option "lmwerdir=./bus" or missing value [ 507.675654][T18472] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 507.775410][T18472] device bridge137 left promiscuous mode [ 507.810802][ T26] audit: type=1800 audit(1582005695.767:331): pid=18462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16485 res=0 06:01:35 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x0, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:35 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$UHID_INPUT(r0, &(0x7f00000004c0)={0x8, {"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", 0x1000}}, 0x1006) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000380)={0x0, 0x4, [0x6333f2aa]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./bus\x00', r3, r4) sendfile(r0, r1, 0x0, 0x40d09) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0xfffffe3e) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f00000003c0)=0x1, 0x4) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000340)={0x4, {0x400, 0x1, 0x5, 0x2}}) [ 507.897816][ T26] audit: type=1804 audit(1582005695.767:332): pid=18462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/345/bus" dev="sda1" ino=16485 res=1 [ 507.991474][T18482] overlayfs: './file0' not a directory [ 508.076145][ T26] audit: type=1804 audit(1582005695.857:333): pid=18479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/326/bus/file0" dev="overlay" ino=16709 res=1 06:01:36 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x80086301, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 508.241286][ T26] audit: type=1804 audit(1582005696.147:334): pid=18494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/346/bus" dev="sda1" ino=16865 res=1 06:01:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:36 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:36 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x0, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 508.726940][T18503] device bridge138 entered promiscuous mode [ 508.786483][ T26] audit: type=1804 audit(1582005696.747:335): pid=18506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/327/bus/file0" dev="overlay" ino=16657 res=1 [ 508.819985][T18510] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:36 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 508.864075][T18510] device bridge138 left promiscuous mode [ 508.908685][ T26] audit: type=1804 audit(1582005696.847:336): pid=18514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/327/bus/bus/file0" dev="overlay" ino=16709 res=1 06:01:36 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x80086601, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:37 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb3") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:37 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:37 executing program 3: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f00000000c0)={0x8, 0x2, 'client1\x00', 0xffffffff80000001, "9c21c10a75f9d19d", "c27868f698ee2d4e6acb947f55b07a0dea33b41b4a2a7d37f0162a9cac8ce58c", 0xfffffff7, 0x1f}) 06:01:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:37 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r0, r1, 0x0, 0x40d09) [ 509.439170][ T26] audit: type=1804 audit(1582005697.397:337): pid=18528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/328/bus/file0" dev="overlay" ino=16515 res=1 06:01:37 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 509.572295][ T26] audit: type=1804 audit(1582005697.517:338): pid=18536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/328/bus/bus/file0" dev="overlay" ino=16709 res=1 06:01:37 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0x80087601, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 509.716314][T18540] device bridge139 entered promiscuous mode [ 509.805773][T18540] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 509.887230][T18540] device bridge139 left promiscuous mode 06:01:37 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:38 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) setitimer(0x3, &(0x7f00000000c0)={{0x0, 0x2710}}, &(0x7f0000000100)) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:01:38 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0045878, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:38 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:38 executing program 3: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$UHID_INPUT(r0, &(0x7f00000004c0)={0x8, {"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", 0x1000}}, 0x1006) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000380)={0x0, 0x4, [0x6333f2aa]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./bus\x00', r3, r4) sendfile(r0, r1, 0x0, 0x40d09) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0xfffffe3e) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f00000003c0)=0x1, 0x4) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000340)={0x4, {0x400, 0x1, 0x5, 0x2}}) [ 510.836583][T18571] device bridge140 entered promiscuous mode [ 510.900140][T18579] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:38 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0045878, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 511.017200][T18579] device bridge140 left promiscuous mode 06:01:39 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U-', 0x7}, 0x16, 0x6) sendfile(r0, r1, 0x0, 0x40d09) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$VIDIOC_RESERVED(r3, 0x5601, 0x0) 06:01:39 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], 0x0, &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:39 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89f") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:39 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc018943e, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:40 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], 0x0, &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 512.078847][T18613] device bridge141 entered promiscuous mode [ 512.116136][T18616] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 512.245716][T18616] device bridge141 left promiscuous mode 06:01:40 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:40 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc018945c, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:40 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f00000000c0)=0x6, 0x4) [ 512.578862][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 512.578878][ T26] audit: type=1804 audit(1582005700.537:355): pid=18629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/350/bus" dev="sda1" ino=16561 res=1 06:01:40 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], 0x0, &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 512.966870][ T26] audit: type=1804 audit(1582005700.927:356): pid=18637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/333/bus/file0" dev="sda1" ino=16705 res=1 06:01:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:41 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], 0x0, &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:41 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc020660b, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 513.174435][ T26] audit: type=1804 audit(1582005700.957:357): pid=18634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/350/bus" dev="sda1" ino=16561 res=1 [ 513.326190][T18650] device bridge142 entered promiscuous mode [ 513.375621][T18652] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:41 executing program 2: mkdir(0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fb0\x00', 0x230800, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001380)={&(0x7f00000009c0)=@deltfilter={0x9a0, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0x7, 0xf}, {0xffff, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0xa317}, @TCA_CHAIN={0x8, 0xb, 0x3951}, @filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x8fc, 0x2, [@TCA_RSVP_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x81, 0x0, 0x3, 0x2, 0x9, 0xdcd5, 0x6, 0x45a, 0x80, 0x7, 0x6, 0x3f, 0x2014, 0x5, 0x2, 0x8, 0x6, 0x8000, 0xe084, 0xdc0e, 0x3, 0x2, 0x7ff, 0xfffff2a3, 0x1b, 0x8, 0x40, 0x6, 0x1, 0xfffffffa, 0x5, 0xfff, 0x9, 0xfffffffd, 0x1, 0x4, 0x3, 0x9, 0x2, 0x7fffffff, 0x1, 0x7, 0x200, 0x6, 0x401, 0x7, 0x30, 0x29c, 0x3ff, 0x4, 0x3a65, 0x100, 0x400, 0x5, 0x836, 0x5, 0x400, 0x101, 0x7fff, 0x7ff, 0x0, 0xffff, 0x8001, 0x485680bf, 0x2, 0x3f, 0x61, 0x80000000, 0x10001, 0x42, 0x0, 0xfffffffd, 0x8, 0x2af, 0x3, 0x10000, 0x1, 0x1000, 0x8b17, 0xfffffbff, 0x5, 0xffffffff, 0xffffff7f, 0x101, 0x101, 0xffffd4d8, 0x40e1, 0x7, 0x1, 0x7ff, 0x7, 0x8, 0x3, 0x20, 0x2, 0xa, 0x9, 0x401, 0x6, 0x3f, 0x0, 0x7f2c, 0x8, 0x81, 0x3f, 0x0, 0x0, 0x0, 0x40, 0x7f, 0x6, 0x5, 0x5eb, 0x1, 0x9, 0x8, 0x800, 0x5, 0x7ff, 0x3, 0x8, 0x1, 0x796, 0x2, 0x831d, 0xfffffffe, 0x8, 0x101, 0x3ff, 0x7fffffff, 0xffffffff, 0x400, 0x1000, 0x9, 0x800, 0x2, 0x5b56, 0x8001, 0xfffffe01, 0x4, 0x7fff, 0x2, 0x3, 0x9, 0x6, 0x18, 0x5, 0x3, 0x3ff, 0x4, 0x3, 0x1c, 0x9, 0x81, 0x4, 0x6, 0x1, 0x29, 0x7, 0x0, 0xac, 0x10001, 0x401, 0x23, 0x1e, 0x401, 0x2, 0x8, 0x4, 0xbd3c, 0x401, 0x6, 0x6f06313d, 0x4, 0x1, 0x1, 0x3, 0x6, 0x0, 0x40, 0x200, 0x80000001, 0x7fffffff, 0x5, 0x5, 0x3ff, 0x7, 0x5, 0xce, 0xd2c, 0x80, 0x34b0, 0x9, 0x2, 0xffffffff, 0x6, 0x1b97, 0xe28, 0x4, 0xfffffffa, 0x4, 0x0, 0x4, 0x4, 0x10000, 0x1f, 0x800, 0x2, 0x8, 0x3, 0x1, 0x0, 0x2, 0x2, 0x9, 0x0, 0x5, 0x3, 0x92eb, 0x8ce, 0x80000000, 0x1, 0xfffffffc, 0x7, 0xb3, 0x6, 0x6, 0x7, 0x1, 0x7, 0x400, 0xffff, 0x7, 0x80, 0x5, 0x7fff, 0x3, 0x7, 0x4, 0x10001, 0x0, 0x2cb2, 0x1, 0x6982, 0x7fff, 0x7, 0x8, 0x6e39, 0x8, 0x7, 0x5ad, 0x101, 0x1, 0x2, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x6, 0x0, 0x4, {0x3, 0x0, 0xe9, 0x0, 0x3, 0x4}, {0x26, 0x2, 0xd0, 0x2, 0x4, 0xfff}, 0x7, 0xff, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x2, 0x8, 0x8, 0x8, 0x0, 0x7, 0x4eae092a, 0xb1, 0x1f, 0x0, 0x401, 0x7, 0x3, 0xffffffff, 0x1, 0xffffff24, 0x3, 0x0, 0x7da8, 0x9a9, 0x8, 0xb01, 0x9, 0x3f7a2bd7, 0x5, 0x1, 0x3, 0x4, 0x1ff, 0x80000000, 0x3, 0x6eaa5cb0, 0x8001, 0x5, 0x0, 0x400, 0x200, 0xffff, 0x2, 0x4, 0x4, 0x1de2, 0x2ad7, 0x9, 0x1, 0x3, 0x3, 0x9d5, 0x0, 0x20, 0x8, 0x4, 0x3, 0x40, 0x1000, 0x1, 0xb8, 0x6, 0x4d3, 0x9, 0x4, 0x20, 0x1, 0x2, 0x3, 0x390, 0x5, 0x9, 0x8000, 0x8, 0x1, 0xfff, 0xa5, 0x4, 0x1ff, 0x1, 0x0, 0x0, 0xfffff035, 0x80000001, 0x2, 0x5, 0x1, 0x42, 0xaa6, 0x2eccd750, 0x7ff, 0x0, 0x9, 0x18, 0x6, 0xffff, 0x48000, 0x0, 0x4, 0x800, 0x1000, 0x1, 0xfff, 0x2, 0x0, 0x9, 0x7, 0x1, 0xffffffff, 0xffff, 0x1c11, 0x7, 0x4, 0x3, 0x8000, 0x4, 0x9, 0x10001, 0x7, 0x8, 0xfffffff9, 0x10000000, 0x10001, 0xe03, 0x4399, 0x2, 0x5a4, 0x0, 0x7, 0x68, 0x9, 0x3ff, 0x7, 0x20, 0xffffffff, 0x6, 0x3, 0x2, 0x4, 0x1, 0x8ea, 0x5, 0x0, 0x80, 0xbce8, 0x2, 0x4, 0xffff, 0x0, 0x2, 0x7, 0x84, 0x7, 0x0, 0xff, 0xffff1d65, 0x68, 0x7, 0x3, 0x200, 0x10001, 0x5, 0x101, 0xffffffff, 0x80000000, 0x3, 0xffff, 0x8001, 0x2, 0x1, 0xffffffff, 0x1f, 0x1, 0xfffffff9, 0xc4, 0x0, 0x8, 0x8001, 0x6, 0x5, 0x1ff, 0x99, 0xd5, 0x2, 0x663, 0x5, 0x4, 0x101, 0x7, 0xbfb9, 0xffffffe8, 0x10000, 0x8, 0x7fffffff, 0x8, 0xfffffff8, 0x800, 0x8001, 0x7, 0xfffff801, 0x40, 0x3, 0x1000, 0x4, 0xfffffffa, 0x7, 0x3, 0x9, 0x0, 0x2, 0x800, 0x6, 0x400, 0x1932, 0x80000000, 0x3f, 0x1, 0x1c4, 0x2, 0x798a5d9f, 0x4, 0x7, 0x1, 0x8, 0x400, 0x400, 0x0, 0x4, 0x81, 0x1, 0x8, 0x10001, 0x5, 0x2, 0x0, 0x7fffffff, 0x1, 0x100, 0x20, 0x400, 0xaf1f, 0x7f, 0x5, 0x80000000, 0x0, 0xa2, 0x0, 0x6, 0x6f, 0x1ff, 0x1, 0x1ff, 0xa9f, 0x3, 0x3, 0x8000, 0x2, 0x3, 0x5b2]}]}, @TCA_RSVP_ACT={0x90, 0x6, [@m_bpf={0x8c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x20000000, 0x5, 0x1}}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x49, 0x6, "835d24dd9e6ae3224e23eb5cbda5c6d62e054472eef4d8ff69322b841799d3010d9818280802de9779dc61a29b54a00af9e1b9ff5802455879a093def2fd1a612a9ac19e03"}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xe, 0x5}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffe0, 0xb}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xffe0}}, @TCA_RSVP_DST={0x8, 0x2, @rand_addr=0x8001}]}}, @TCA_CHAIN={0x8, 0xb, 0x10001}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_BPF_FLAGS={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @TCA_RATE={0x6, 0x5, {0xff, 0xe3}}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, [@TCA_BPF_NAME={0xa, 0x7, './bus\x00'}, @TCA_BPF_FD={0x8, 0x6, r2}, @TCA_BPF_FLAGS_GEN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}]}, 0x9a0}, 0x1, 0x0, 0x0, 0x44}, 0x810) chdir(0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000640)={{0x2, 0x4e23, @local}, {0x306, @local}, 0x38, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 'team_slave_0\x00'}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/autofs\x00', 0x2400, 0x0) pivot_root(&(0x7f0000001400)='./bus\x00', &(0x7f0000001440)='./bus\x00') ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f00000006c0)=0x6) newfstatat(0xffffffffffffff9c, &(0x7f0000001480)='./bus\x00', &(0x7f00000014c0), 0x400) fstat(r5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000880)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0xc397, 0x4e23, 0x20, 0x2, 0x2, 0x2, 0x60, 0x20, 0x2b, 0x0, r6}, {0x7fffffff, 0x8, 0xe8e1, 0x80000001, 0x7, 0x0, 0x1ff, 0x800000000000}, {0xffffffffffffffff, 0x20, 0x80}, 0x2, 0x6e6bb0, 0x1, 0x1, 0x2, 0x3}, {{@in6=@mcast2, 0x4d6, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x34ff, 0x4, 0x2, 0x7f, 0x8, 0xfff, 0xff}}, 0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./bus\x00', 0x100000000028c, 0x5, &(0x7f00000003c0)=[{&(0x7f0000000140)="c40e4bba167c22df0422db6b5538f61970a8c28b721520612033a6db96a5bccb22c465628806586bd9cc7c2c8ba47228414998450a", 0x35, 0xff}, {&(0x7f0000000240)="b1ca4e17fe93d0527922e56eca1ef9fee2169fe93f6e87862b9c47134ec8ad87fab7a9c325adb0a21f3b5841e48b7c9670c50328fd2df789641bc8922ca6067e811e34a1b775ec92f753721acae5d472db75cd581b3789df8440757bb35c7f3df19239d071658e0d54efbc2e802b39dd86919765801e74c7d855a5a96d9622d628812fcbe355a4e39a", 0x89, 0x7}, {&(0x7f0000000300)="234e85d16900f2c2b6ca9c4f1fb4a092ed2f6198bcdb4332913e3713d0d518c35fa8df288384380e9a35ca286d6aa2e55f6adce32439f256b6c41ad43d124257713a0b728529953452790cb64b6122c6a9819deb2569adf4e3634a0dcf75d83cc75a6d6db7a85e969c9b022623f5d2fdcbbb9f500bb0730ff953e2111578784b6132ea490fdc4d908add644d11661efab1b03b12237329ff2fef9a32651e6806159a167568b01294f60a0460883b5402dc48316c0792dc50", 0xb8, 0x9}, {&(0x7f00000004c0)="6ab7750259e0db1ffd89ea0522d9154b9b3bfacf15b6b7dde9a6ac17eaf6e1476cdd823a8af29b42634f75a709583d3a41a72ecc70793e0e3bb4989ef63542b2428d7206791f1868dd1315d463fa1caf04a3caa6da7f3f74c0b4c251eae4287beb97328edbdfeb162ead06af371ab879da6fc0f48036ec9c7f99693ba2ccd73d1337450e056f4ca9d6ce5dc8ed28cca8f9423a64741c6dc97ba587005df4bab772d894c3103712c70c4d6b3741712db2f773d06d8ef9b97b038cf3a9844b9b2bfe78070335f1f6156f89c8009d4c7a2409802540360326586f708e003fb9679e14142259fe9e96894a60", 0xea, 0x9}, {&(0x7f0000000180), 0x0, 0x6}], 0x1200001, &(0x7f0000000700)={[{@dots='dots'}, {@nodots='nodots'}, {@dots='dots'}, {@fat=@tz_utc='tz=UTC'}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@fowner_lt={'fowner<', r7}}, {@smackfsroot={'smackfsroot', 0x3d, '{wlan1\x00\x00#'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@subj_role={'subj_role'}}, {@euid_eq={'euid', 0x3d, r7}}, {@measure='measure'}]}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r9 = getpid() ptrace(0x10, r9) ptrace$getregset(0x4205, r9, 0x202, &(0x7f0000000080)={&(0x7f0000000400)=""/63, 0x3f}) write$FUSE_LK(r8, &(0x7f00000001c0)={0x28, 0x0, 0x3, {{0x4, 0x7, 0x0, r9}}}, 0x28) [ 513.476098][T18652] device bridge142 left promiscuous mode 06:01:41 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:41 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], 0x0, &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 513.632696][ T26] audit: type=1804 audit(1582005701.587:358): pid=18663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/351/bus" dev="sda1" ino=16484 res=1 [ 513.747797][T18663] FAT-fs (loop2): Unrecognized mount option "fsmagic=0x0000000000000008" or missing value [ 513.759443][ T26] audit: type=1804 audit(1582005701.707:359): pid=18661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/334/bus/file0" dev="overlay" ino=16516 res=1 06:01:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 513.978787][ T26] audit: type=1804 audit(1582005701.937:360): pid=18665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/334/bus/file0" dev="overlay" ino=16516 res=1 06:01:42 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc050561a, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 514.234787][T18685] device bridge143 entered promiscuous mode [ 514.247149][T18685] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 514.263565][T18685] device bridge143 left promiscuous mode 06:01:42 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], 0x0, &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:42 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 514.509379][ T26] audit: type=1804 audit(1582005702.467:361): pid=18689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/335/bus/file0" dev="overlay" ino=16518 res=1 [ 514.727838][ T26] audit: type=1804 audit(1582005702.687:362): pid=18700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/335/bus/file0" dev="overlay" ino=16518 res=1 06:01:42 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:42 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x2, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 514.985315][ T26] audit: type=1804 audit(1582005702.717:363): pid=18699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/335/bus/file0" dev="overlay" ino=16518 res=1 [ 515.145171][T18712] device bridge144 entered promiscuous mode [ 515.171509][T18714] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 515.229533][T18714] device bridge144 left promiscuous mode 06:01:43 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 515.327296][ T26] audit: type=1804 audit(1582005703.287:364): pid=18717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/336/bus/file0" dev="overlay" ino=16626 res=1 06:01:43 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:43 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:44 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 516.100989][T18745] device bridge145 entered promiscuous mode [ 516.112012][T18745] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 516.161665][T18745] device bridge145 left promiscuous mode 06:01:44 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x4, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:44 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:44 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(0x0, 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 516.517465][T18743] device bridge3 entered promiscuous mode [ 516.565468][T18750] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 06:01:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:44 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x5, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 516.850407][T18750] device bridge3 left promiscuous mode 06:01:45 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(0x0, 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 517.269875][T18766] device bridge146 entered promiscuous mode 06:01:45 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x6, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 517.316460][T18767] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:45 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(0x0, 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 517.589520][T18767] device bridge146 left promiscuous mode 06:01:45 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 517.922387][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 517.922441][ T26] audit: type=1804 audit(1582005705.877:373): pid=18793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/340/bus/file0" dev="overlay" ino=16580 res=1 [ 518.052618][T18786] device bridge4 entered promiscuous mode [ 518.092006][T18787] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 06:01:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 518.139879][T18787] device bridge4 left promiscuous mode 06:01:46 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:46 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 518.587802][T18805] device bridge147 entered promiscuous mode [ 518.645873][T18806] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r5, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 518.688166][T18806] device bridge147 left promiscuous mode [ 518.719122][ T26] audit: type=1804 audit(1582005706.677:374): pid=18812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/341/bus/file0" dev="overlay" ino=16611 res=1 06:01:46 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 518.907926][ T26] audit: type=1804 audit(1582005706.867:375): pid=18820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/341/bus/bus/file0" dev="overlay" ino=16659 res=1 06:01:47 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x8, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 519.056368][ T26] audit: type=1804 audit(1582005706.867:376): pid=18815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/341/bus/bus/file0" dev="overlay" ino=16659 res=1 [ 519.210548][T18819] device bridge5 entered promiscuous mode 06:01:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 519.261488][T18824] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 519.331130][ T26] audit: type=1804 audit(1582005707.287:377): pid=18828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/342/bus/file0" dev="overlay" ino=16516 res=1 06:01:47 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 519.470408][ T26] audit: type=1804 audit(1582005707.417:378): pid=18837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/342/bus/bus/file0" dev="overlay" ino=16518 res=1 [ 519.536660][T18824] device bridge5 left promiscuous mode 06:01:47 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x300, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 519.692380][ T26] audit: type=1804 audit(1582005707.427:379): pid=18835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/342/bus/bus/file0" dev="overlay" ino=16518 res=1 06:01:47 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 520.016961][ T26] audit: type=1804 audit(1582005707.977:380): pid=18848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/343/bus/file0" dev="overlay" ino=16609 res=1 [ 520.040829][T18833] device bridge148 entered promiscuous mode 06:01:48 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 520.082331][T18836] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:48 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 520.177970][ T26] audit: type=1804 audit(1582005708.097:381): pid=18852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/343/bus/bus/file0" dev="overlay" ino=16561 res=1 [ 520.220179][T18836] device bridge148 left promiscuous mode 06:01:48 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x500, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:48 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, 0x0, 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:48 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, 0x0, 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 520.910967][ T26] audit: type=1804 audit(1582005708.867:382): pid=18868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/344/bus/file0" dev="overlay" ino=16530 res=1 06:01:48 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 520.989551][T18873] device bridge149 entered promiscuous mode [ 521.049352][T18878] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 521.095709][T18878] device bridge149 left promiscuous mode 06:01:49 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x600, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb4"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 521.550728][T18888] device bridge150 entered promiscuous mode [ 521.613029][T18891] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 521.687039][T18891] device bridge150 left promiscuous mode 06:01:49 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x700, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:50 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, 0x0, 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:50 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb4"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:50 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:50 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3f00, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 522.456722][T18914] device bridge151 entered promiscuous mode [ 522.528346][T18918] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 522.634794][T18918] device bridge151 left promiscuous mode 06:01:50 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 522.947413][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 522.947432][ T26] audit: type=1804 audit(1582005710.907:390): pid=18933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/347/bus/bus/file0" dev="overlay" ino=16548 res=1 06:01:51 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0xff00, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:51 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, 0x0, 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 523.130592][ T26] audit: type=1804 audit(1582005710.957:391): pid=18932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/347/bus/bus/file0" dev="overlay" ino=16548 res=1 06:01:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb4"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:51 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 523.331199][T18943] device bridge152 entered promiscuous mode [ 523.363592][T18943] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 523.414915][T18943] device bridge152 left promiscuous mode 06:01:51 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x0, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 523.767195][ T26] audit: type=1804 audit(1582005711.727:392): pid=18956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/348/bus/file0" dev="overlay" ino=16644 res=1 06:01:51 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x1000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 523.957726][ T26] audit: type=1804 audit(1582005711.837:393): pid=18959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/348/bus/file0" dev="overlay" ino=16644 res=1 06:01:52 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:52 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x200002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x800, 0x151501) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r5 = getpid() ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000080)={&(0x7f0000000400)=""/63, 0x3f}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={r5, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)='overlay\x00', 0xffffffffffffffff}, 0x30) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x40002, 0x0) r11 = fspick(0xffffffffffffff9c, &(0x7f00000007c0)='./bus\x00', 0x1) r12 = gettid() r13 = syz_open_dev$usbmon(0x0, 0x0, 0x48000) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r14, r15, 0x0, r15, 0x0, 0xb}, 0x0, 0xffc, 0x3, 0x0, 0x0, 0x0, 0x81}) r16 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r17 = syz_open_dev$usbmon(0x0, 0x0, 0x48000) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r17, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r18, r19, 0x0, r19, 0x0, 0xb}, 0x0, 0xffc, 0x3, 0x0, 0x0, 0x0, 0x81}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1082044, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472616e733d6627db00c1022a2050061d579578b01864b20a66646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r16, @ANYBLOB=',cache=none,loose,dfltgid=', @ANYRESHEX=r19, @ANYBLOB=',access=client,privport,obj_role=^}wlan0)system.,appraise,hash,obj_role=trans=fd,,fowner=', @ANYBLOB]) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r20, &(0x7f0000000100)=ANY=[], 0xfffffe3e) fstat(r20, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r22, &(0x7f0000000100)=ANY=[], 0xfffffe3e) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000b40)={0x0, 0x0, 0x0}, &(0x7f0000000b80)=0xc) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r24, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$DRM_IOCTL_GET_CLIENT(r24, 0xc0286405, &(0x7f0000000bc0)={0x8, 0x80000001, {0xffffffffffffffff}, {0xee00}, 0x2, 0x4}) r26 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r27 = syz_open_dev$usbmon(0x0, 0x0, 0x48000) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r27, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r28, r29, 0x0, r29, 0x0, 0xb}, 0x0, 0xffc, 0x3, 0x0, 0x0, 0x0, 0x81}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1082044, &(0x7f0000006940)=ANY=[@ANYBLOB="7472616e733d6627db00c1022a2050061d579578b01864b20a66646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r26, @ANYBLOB=',cache=none,loose,dfltgid=', @ANYRESHEX=r29, @ANYBLOB=',access=client,privport,obj_role=^}wlan0)system.,appraise,hash,obj_role=trans=fd,,fowner=', @ANYBLOB="d67b3bf9d7ba8a3d"]) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r30, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000c40)={0x6, 0x2, 0x4, 0x1, 0x6, {}, {0x4, 0x2, 0xfb, 0x3f, 0x7d, 0x1f, "d5f56dd6"}, 0x2, 0x2, @planes=&(0x7f0000000c00)={0xff, 0x66, @fd=r30, 0x7}, 0x2}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r32, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r33, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r34, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r35 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000d00)=0x1c, 0x40000) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r36, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r37 = socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r38, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r39, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r40, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r41, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r42, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000d40)=0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r44, &(0x7f0000000100)=ANY=[], 0xfffffe3e) getsockopt$inet_IP_IPSEC_POLICY(r44, 0x0, 0x10, &(0x7f0000000d80)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000e80)=0xe8) getresgid(&(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)=0x0) r47 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r48, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r49 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000025c0)='/dev/ttynull\x00', 0x8480, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r50, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r51, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r52 = socket$alg(0x26, 0x5, 0x0) r53 = getpid() ptrace(0x10, r53) ptrace$getregset(0x4205, r53, 0x202, &(0x7f0000000080)={&(0x7f0000000400)=""/63, 0x3f}) r54 = getpid() ptrace(0x10, r54) ptrace$getregset(0x4205, r54, 0x202, &(0x7f0000000080)={&(0x7f0000000400)=""/63, 0x3f}) r55 = getpid() ptrace(0x10, r55) ptrace$getregset(0x4205, r55, 0x202, &(0x7f0000000080)={&(0x7f0000000400)=""/63, 0x3f}) clone3(&(0x7f0000002900)={0xf0800000, &(0x7f0000002600)=0xffffffffffffffff, &(0x7f0000002640), &(0x7f0000002680), {0x36}, &(0x7f00000026c0)=""/250, 0xfa, &(0x7f00000027c0)=""/225, &(0x7f00000028c0)}, 0x50) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r57, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r58, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r59, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r60 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/consoles\x00', 0x0, 0x0) r61 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/snapshot\x00', 0x8240, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r62, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r63 = inotify_init1(0x80800) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r64, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r65 = accept$inet(r64, &(0x7f0000002a00)={0x2, 0x0, @empty}, &(0x7f0000002a40)=0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r66, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002c80)=0x0) r68 = getuid() r69 = getpid() ptrace(0x10, r69) ptrace$getregset(0x4205, r69, 0x202, &(0x7f0000000080)={&(0x7f0000000400)=""/63, 0x3f}) r70 = pidfd_open(r69, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r71, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r72, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r73, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r74, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r75, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r76, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r77, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r78, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000002cc0)={0x1, 0xffffffffffffffff, 0x1}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r80, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r81 = socket$inet_dccp(0x2, 0x6, 0x0) r82 = accept4(0xffffffffffffffff, &(0x7f0000002d00)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000002d80)=0x80, 0x80800) r83 = socket$inet6_dccp(0xa, 0x6, 0x0) r84 = getpid() ptrace(0x10, r84) ptrace$getregset(0x4205, r84, 0x202, &(0x7f0000000080)={&(0x7f0000000400)=""/63, 0x3f}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r85, &(0x7f0000000100)=ANY=[], 0xfffffe3e) getsockopt$sock_cred(r85, 0x1, 0x11, &(0x7f0000002dc0)={0x0, 0x0}, &(0x7f0000002e00)=0xc) lstat(&(0x7f0000002e40)='./bus\x00', &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r88 = getpid() r89 = syz_open_dev$usbmon(0x0, 0x0, 0x48000) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r89, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r90, r91, 0x0, r91, 0x0, 0xb}, 0x0, 0xffc, 0x3, 0x0, 0x0, 0x0, 0x81}) r92 = getegid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000004440)=0x0) r94 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r95 = syz_open_dev$usbmon(0x0, 0x0, 0x48000) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r95, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r96, r97, 0x0, r97, 0x0, 0xb}, 0x0, 0xffc, 0x3, 0x0, 0x0, 0x0, 0x81}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1082044, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472616e733d6627db00c1022a2050061d579578b01864b20a66646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r94, @ANYBLOB=',cache=none,loose,dfltgid=', @ANYRESHEX=r97, @ANYBLOB=',access=client,privport,obj_role=^}wlan0)system.,appraise,hash,obj_role=trans=fd,,fowner=', @ANYBLOB]) r98 = getpid() ptrace(0x10, r98) ptrace$getregset(0x4205, r98, 0x202, &(0x7f0000000080)={&(0x7f0000000400)=""/63, 0x3f}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004680)={0x0, 0x0}, &(0x7f00000046c0)=0xc) stat(&(0x7f00000028c0)='./file1/file0\x00', &(0x7f0000006a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r101 = getpid() ptrace(0x10, r101) ptrace$getregset(0x4205, r101, 0x202, &(0x7f0000000080)={&(0x7f0000000400)=""/63, 0x3f}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r102, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$NS_GET_OWNER_UID(r102, 0xb704, &(0x7f00000049c0)=0x0) statx(0xffffffffffffff9c, &(0x7f0000004a00)='./file0\x00', 0x6200, 0x8, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r105, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r105, 0xc00c642d, &(0x7f0000006040)={0x0, 0x0, 0xffffffffffffffff}) r107 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000006080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r108 = openat$cuse(0xffffffffffffff9c, &(0x7f00000060c0)='/dev/cuse\x00', 0x2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r109, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r110, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r111, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r112, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r113, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r114 = getpid() r115 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r116 = syz_open_dev$usbmon(0x0, 0x0, 0x48000) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r116, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r117, r118, 0x0, r118, 0x0, 0xb}, 0x0, 0xffc, 0x3, 0x0, 0x0, 0x0, 0x81}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1082044, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472616e733d6627db00c1022a2050061d579578b01864b20a66646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r115, @ANYBLOB=',cache=none,loose,dfltgid=', @ANYRESHEX=r118, @ANYBLOB=',access=client,privport,obj_role=^}wlan0)system.,appraise,hash,obj_role=trans=fd,,fowner=', @ANYBLOB]) r119 = getpid() ptrace(0x10, r119) ptrace$getregset(0x4205, r119, 0x202, &(0x7f0000000080)={&(0x7f0000000400)=""/63, 0x3f}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r120, &(0x7f0000000100)=ANY=[], 0xfffffe3e) fstat(r120, &(0x7f00000063c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r122 = getgid() pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r123, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r124, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r125, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$TIOCGSID(r125, 0x5429, &(0x7f0000006440)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000006480)=0x0) getresgid(&(0x7f00000064c0)=0x0, &(0x7f0000006500), &(0x7f0000006540)) r129 = syz_open_dev$ndb(&(0x7f0000006580)='/dev/nbd#\x00', 0x0, 0x20000) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r130, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000065c0)=0x0) r132 = syz_open_dev$usbmon(0x0, 0x0, 0x48000) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r132, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r133, r134, 0x0, r134, 0x0, 0xb}, 0x0, 0xffc, 0x3, 0x0, 0x0, 0x0, 0x81}) r135 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r136 = syz_open_dev$usbmon(0x0, 0x0, 0x48000) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r136, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r137, r138, 0x0, r138, 0x0, 0xb}, 0x0, 0xffc, 0x3, 0x0, 0x0, 0x0, 0x81}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1082044, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472616e733d6627db00c1022a2050061d579578b01864b20a66646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r135, @ANYBLOB=',cache=none,loose,dfltgid=', @ANYRESHEX=r138, @ANYBLOB=',access=client,privport,obj_role=^}wlan0)system.,appraise,hash,obj_role=trans=fd,,fowner=', @ANYBLOB]) r139 = getpid() ptrace(0x10, r139) ptrace$getregset(0x4205, r139, 0x202, &(0x7f0000000080)={&(0x7f0000000400)=""/63, 0x3f}) r140 = geteuid() r141 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r142 = syz_open_dev$usbmon(0x0, 0x0, 0x48000) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r142, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r143, r144, 0x0, r144, 0x0, 0xb}, 0x0, 0xffc, 0x3, 0x0, 0x0, 0x0, 0x81}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1082044, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472616e733d6627db00c1022a2050061d579578b01864b20a66646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r141, @ANYBLOB=',cache=none,loose,dfltgid=', @ANYRESHEX=r144, @ANYBLOB=',access=client,privport,obj_role=^}wlan0)system.,appraise,hash,obj_role=trans=fd,,fowner=', @ANYBLOB]) r145 = getpid() ptrace(0x10, r145) ptrace$getregset(0x4205, r145, 0x202, &(0x7f0000000080)={&(0x7f0000000400)=""/63, 0x3f}) r146 = syz_open_dev$usbmon(0x0, 0x0, 0x48000) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r146, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r147, r148, 0x0, r148, 0x0, 0xb}, 0x0, 0xffc, 0x3, 0x0, 0x0, 0x0, 0x81}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006700)=[{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000300)="997ec5b1367f9ba057fa70580b6f56e57c495dbd37f16d4c614184cb46be9d61a9c8e04f99b21cdd3ef1c5ef5c3795410054205b28988411296c1113e8bd9ec640c864ee7aa5b3840829e16ffcde1a5133623450ffcaed2e1bea598f42ca5ec8a540baa7f806cb89c98c9f24967ca790d85eeaa1008cb032cecd71a8580311354ecb6af6f69222b63c9943ceac107b1cafa2e1ae714d780c704a74b586d7536532976fb8e0998fa002ede150a17e52ac68b7cb23b1b58834b85400c3e057851bfe65c5407de7acb794f1b929eb6a8cdbfbec91eb59fda786ec4d6131507ef7f9700b169aef76a130ccb9e0a7cc4f6a987b641d183f", 0xf5}, {&(0x7f0000000400)="b29ace2e7e5cecd23b78cc239ee21a6198e2aaf73b9b1362d8bf9efd0ce7e61c22762771d1f792bfc94b5b4ebbc94f527fcccc2d9bc95343ffe6b79bb504347ee77264b5f00af82bc1b7bee52483bc06b820677667d62aa328e1d059e8bdb1121a2f1ee5915ddb67df363783bf9c", 0x6e}, {&(0x7f0000000480)="ba30639c9694ce6ac3f37ada50cc50fe233acbc6b241aa1e33ff2b289355777b8a9c83aa57a8d76710273dbb2ef83760638729087d3d29f28a42dd9bc2dc9fbb8a22d2320b321d004f6223e334a0205a7c3ec90a3de045443425d1ad979ed9392e8e42ee72e82cc604a83eb84a1a415f9c24bd3a0c5cf1dc78aa3170b7d4a9bef6cc68b804041f8db2d87706a8344f70fb7042f1ddb8b178ee064b31008d1f4a2d5e8ce9ab03196a627351b8b7f4f5b18c931e7f07", 0xb5}], 0x3, &(0x7f0000000800)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r2]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r9, r10, 0xffffffffffffffff, r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}], 0xb8, 0x4044}, {&(0x7f00000008c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000940)="3022885805ffa3da7b77fd1c140afbbe4dd7f03fc13768935bd1d2a2cba7413edba7e366d3ce1a935121b5743495eea3d804e3a2998c87694c6b605895e25a803ac3c387d6d319f2ec9320347b953b6a3d2a14792f1106f153af260190755b517a7d2261d2102a5f13b71b4d8f4f2f256a47ca3f5b416524921793e06ddfaf1d10e8f69e48c28f81feb3a328d43d02150b5c71ef6fe54c66e0d93757b41e36c41964df5b5286653bec97fd9d14d1d3a45e29abc9c6effac41465f0198296392064fbef69232027949726b1202a896783f9c0545b02a9dea089403ed713da2b7b8438b46fe33297", 0xe7}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000000a40)="aea2d3eea4f58fa86a5493d58185883428411602b189", 0x16}], 0x3, &(0x7f0000000f80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r21, r23}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r25, r29}}}, @rights={{0x34, 0x1, 0x1, [r31, r32, r33, r34, r35, r36, r37, r38, r39]}}, @rights={{0x1c, 0x1, 0x1, [r40, r41, r42]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r43, r45, r46}}}], 0xc8, 0x40}, {&(0x7f0000001080)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000001100)="d151d8d9", 0x4}, {&(0x7f0000001140)="a669d14e5956079ebd5aee54a1f10d2a8ac6b707816cb452763313fb96dbda73446753a8a2e73b1ae449a2f3af648a24350eb66b11da0240edb3225adc4221752b43c7c2090b06664fac9d6d", 0x4c}, {&(0x7f00000011c0)="7160b62897ec2cc1ec41373e9fe5c3a8530451a3b167ee4e433180329f0b1d0b7726d29db69883dd8969e02b6d536756ac07ccc1e24f1eff7c357e86dfea037577389761582588f8bf76e587c6c3703684844da52c8b3143c284be95b4650e98bfd61eefa250968603489965df708735d0e54f3f97fa4fc98c07071c1e5cc5f0ada90c8d5c62129ce901393e7d57354ddae15437be8ef2e6c8f556870864910cac8307cd3ae6c2b28ce7dd3b2a79de0aa2c25185f3f7622b37e3dcdabc", 0xbd}, {&(0x7f0000001280)="631878c062fb346d04634297fc5acf49b4bde7f9beb5f14acfc1283e211c41e8782cdb", 0x23}, {&(0x7f00000012c0)="1d439135de4f3d2d0225dfbf79c63551b0e04b2ff0646dcd33ce56196a6b6bfd93b5986644348dab5cededc0c8f3af9f93b477764d9ba1bb148892db498cd200521639c1b9422fb6f798e2969dfbc869a86e30d081817bcff668329b363ab847630e1fd98c2d75b45fd80e3c969f999692fcaf6b4348b20f583809acc20bd9e7495c7a361bfdddd0f1338281f261ac58e97ee80cc20bb11bedac9c43d1d37757269ae56ed39738ec73b32d67408c040e2ff107655256cec3909d4fb74f66bc8805b3944a45c31e5bebc0a949c4fea27f7eced06f0d62ff8cb933a296e80f23", 0xdf}, {&(0x7f00000013c0)="8355e95d72b3ae7242414e53e977ce60d42ca4b49c57bc07bfe0354a9932b4769997e15680dd154365ed93d7824d6135645e27ca9d00381634132ada52f73101e41d81c93da44a7f75bfeab9c4c1043172f35598d57eb98777b478d0741c54e52bab8a49327d9587cdfa2ff12eba3b6dfa8363adf293411bcef14c090ca26ce95ce4f3db5dbef06c937662f944c44dc95dcb77fac944", 0x96}, {&(0x7f0000001480)="c4642d8cc6577e3de6a9e32d76b7ac3c5b4f7473c8358d8efb69ba08fadc6959551fa8fa2f3673e7c937305e197299b46905b3229657a3cf", 0x38}], 0x7, &(0x7f0000002a80)=[@rights={{0x14, 0x1, 0x1, [r47]}}, @rights={{0x20, 0x1, 0x1, [r48, r49, r50, r51]}}, @rights={{0x28, 0x1, 0x1, [r52, r56, r57, r58, r59, r60]}}, @rights={{0x20, 0x1, 0x1, [r61, r62, r63, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r65, r66]}}], 0xa0, 0x220000c1}, {&(0x7f0000002b40)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000002bc0)="3ab226609db7d62fd5dee4c73f8df9e7b566284b7e737c85387c92c72a01ff131c4f04b69f002e6b718dc1e1f861715e94da3a589e1443861f616d8322c4a5792c54b333c518c213a2583e1cb6806e7ec64d0707945d300bdc2e44a1", 0x5c}], 0x1, &(0x7f0000002f00)=[@cred={{0x1c, 0x1, 0x2, {r67, r68, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r70, r71, r72, r73, r74]}}, @rights={{0x24, 0x1, 0x1, [r75, r76, 0xffffffffffffffff, r77, r78]}}, @rights={{0x14, 0x1, 0x1, [r79]}}, @rights={{0x20, 0x1, 0x1, [r80, r81, r82, r83]}}, @cred={{0x1c, 0x1, 0x2, {r84, r86, r87}}}, @cred={{0x1c, 0x1, 0x2, {r88, r90, r92}}}], 0xe8, 0x4000040}, {&(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000043c0)=[{&(0x7f0000003080)="bc7e80ac75e9bae69db9cf3010d8f9f3ba763b981911237bf48c46368bcdbfc69ba49db3a7c0d29ba9369853938b", 0x2e}, {&(0x7f00000030c0)="f3687b70391da13fe7ff83eef9837cc5af1faf30b29162dd5ec379183ae3d40aa0dcd13b16b00f56a9dc63110f4d2062e8e457ee8200faddcc3d3c45c7960e087150f03e0632bbfdc029327e571626ffb3e1a1dc73478cc57cd18c0357cd632fb40cd855ea4adebcdc44297601f1c3a7305c31d5de2466e531e2d78f891414b735a3f20264068a4c1eaccbc5dbed3e9ee2c8e34c938ee5b2a29a0cb6ccc2dd737a098884285caf3aa4cfdaa143630449ccd5ae7df77f018938d388e33c63f8cfa4f9891eaf2af51aeb8978e2c5a23b9e6f049099a2", 0xd5}, {&(0x7f00000031c0)="1ef35cb484cfcedf13dd6ce1bed24c4e489b46ebab3587d091055225ee15c2fdc5e060cf14c8dd7198d0d25217554d8295098195ad5c6f9f825f04d3c1d7b827f72b773148d5fd0409761a3d514266253e83fd1a85219c40e0cab6a67b57c9d2317d1d6471080f0e458e61d992bd576494b73a9a276ac568c6bf907ef7804e2e59e5dbf1f3c4c98718e634c2c811e08e017ae8e885c34768dbb113dc36436cc1dae61c8bb8bdca01774e0ad2cd006f0c28c58e0370528cf6883e799ac1e98232d8cc3a6fccae1c75cdb882d14a546407eac79019b17f0f4578ae11580311adc4bb127457091079c2f765ccbe2c9c3b86f322f17976dc0380b8d209cc8f3715a369f63bf9a74e30b363e36e7ab7fd325802b4c2b6eafdf59bfdda30b172c2285f2915a9dde0649f253360fee87965d6b2bafb189b9921bb3dc9ace97f1f29fe2d05a0154f5dc068b63d7a2627631bff8b13ba6f4a6f76917b85b6ec03f738e01ff56f93d61478db127b79e3c8caf74c55186808eb2337a3b4abf83522ab2e678dfde74ac5558a3fb8d04130c99b99bf352edcd3d574708978a6c717e7542bef3f517a9223cc5acde745aced298d459a169d3ef82cd9d920b2e5cf3c8cd2c8dd3c49650b55997e5bfd46787c7fcd7ce6425c0a4a9186f2add0576e95f518d619e1d976cae7e614afc3525104fba2e1cd8908e4897648cdb7aa1f283aabe392826d68cbb27b8d8b943824abd56ed21983345035bc16e6e5ec127c472f01089cb0d5f30e6a8e78c87170a4855e590d21fdcd2e04b6ec40e4ae6cfbe2ddf6687bee0f8642df55ff92f1603752cb98a91444e9b67e82daf2995fd8bacd13c8bebace1e7f706ff31a3e56a459f297aad6448728ba3c5a3f0c9b486d18cd9fd2de8cf4113679371db301a93c847d4a4d78f9b1fc977e7cf822c429c117d515f1a154c0b760a50d1caa727593eec1056929ba512dc24e951844689aaeb1fb5369815617cc93bba26934e9e7654047a8cf4a2a2d71f4840032bf5ee721bdd6f774ff1cab402838fb3e554f79c6b78b315e07f9651b5cc25e50ab2e7d8a75652d3a3f0fa3a8702570413412ce2ff829fb08ab529eab32f6ce22cd1a821c769d469657554c5c008aa588c5035bb9cbff187a556da49a9c83271c0e880eea1eb6de626bbae5b8dfa35bc0fdb9a6a6d2c7a10992a301e23177bc56310212a932411e5ad0bfb8ade0f2772a28224dc2bb2947cac6f113d0d241265af10fd9547f8aa3096cfea3b03d64193ba3acc17ccd17b61837b43faf0d4f14d13e6f3f72e86dfc69767627b79caccedab98b7a663b3dfd780da1e0d471d0f07d933ceefb49dbc5fda209da469c5625a990207b162795c41d60cdab2f349ca6c6a0d89d925d766953feb1b72a593e4a55bdff17b863eda0920dbe51d91cfc0d70afdfc71f8ecf728589f638b695efe52aaa7815c236628fbb7fda2541e668514a1b54c5b4fe35b6ced1888fe8103e4c68a12817c895f31d14133e97a8664b1b2b7a73d4b22861f431516f4e7e11676b0e31bd4b603b23b180433844ee9d6819a48db563c6ce0c72849b15106aaee4f34ae2c63b375507aff17454f308e39c095e101535ca0aeb2a506776c607df3dd09f22627f7edadee3b02a69cbd2b4f450591f5118bc5fab0d1e9426c3c5f1eda414632fd076c5b306a67eba5fde351f87c073186335344f06bb33dbbf5f44e1c30abbe9e147ede0859b4129329582f7953144d98e93e3c767a2aa55dfe1a86cb95ac84a14220fa7c3e14dafae4ea9d6376c19e6c12f8e78de42e7ce75b27f2a18b8e22472b6e193389c3fda24fb052a072a924527c7be8acc101197a6b9fc89d1863302b906fba70400f8fefa836c11710cc7894ad59f8c671c30be7ec0e16289717bf43a8b3e59bffc2bb68aab406fb7163cae47c0c6695ef190e7e0b4140eaa4db75ce45befca151dd73ac043617d07c16464e3b2d49b9e0746c0b0f4928925cf626ccf01c9226580bd0c11638b0759de27314d9e34b8404e6b1022ab7510b54d13c6f7ea8400b49fc19609f53dad44d61675d902b8e40dd665366840d1ad4aafe3c1db1f5e7c1acdac47ac92a06b3bb41a943e60d190e9f299e5d970f99c3238dd05565baa99e09f57ea04ed31bd3df8c907bcfc900c113a5774664bfb77b0f1f7944dfc6c8bf1ece3c7a2e7826fa8abf4d020bb91a690dba51921c1512ad3984a0e5b4f5c82a72ddebdc6db56a250725ed195177c65fa02b2af2953c2b6662e0bde42aec2401f75db82989bbceed338514214c85bb1de49f3646c209a259a628f52707e235624decbb628c71d6558c5a17c10e391a598e6a66622d181ade6a9ea7c2c78a5f2afb145de69173faeb4a042361ff762be54b6f00c8a22caf6158b9b739288c2e6398487afffc0148eb44202768cc6f7f68450b5d200b7da31f7269c52ad2e0a68d6812b593f4cdcda0b5bc4198be60a89cc8144734e8cd0700a5e179a13183eb541145b65b78e6449f6528af6c1b507b7b774c51bb0f6dad5d1a027997e82af97b28ff4b7529c6b8238240a5bca814c734625c7a327e7c946796394d5180d9b1741d204d8aea4b8e65c1871d8a13f16c4255282bd9f6f470ffd18bc72f3a5bf404648b261fed229f9238015cc0dd027a1820643513417c5d4a7b55dc3f9f55c944d1e24175f714aa2502da8b6192f08ef673675716f2551eeec8cc85b820c8a95a690e5a0ea8ee2f2b9ad323551cc050d0ee06fc39e4a79c9202f947dc25e5022ba7f6c7bb8cb92820d5239e33359f120d7c96b686413cebedc6c9ee7d27c910c145b8a75166135e1f25c8a7f0581caa86f1d42db4dd2d502aa6ec7941a550870098a8e55d7da932a4f328f653947d07e04ad247d102c9e1997091982e046b5bb57790ace11eda41eace816019c3767bd6e18c65df82349b5311ce5e67a28fe6640f36c7435c75205fb93f8d336ea9e8409dbb7de48a740eb1f391ec8344cd9f6647c3c87aad02d8507c620796f84b1d07b9ebc18acf94adaea1a1562c97a5b188d65cee639b7866e7f9b867e7f8a9bed6ff33745d8b09c1e3a9a3b040576b1b01c45f43c4dc5c8a1614a5d5d72ff71859859400ef4ac454921c58c74e3140c2482ea62075e5b394c027172a8451d0f2f6bade3d99b52f12de49ca4aa6257af16ffa27f9430817927847ee9afcb642229f3bbc1ad46970f1b8adcd8b7f8aa737a59b4fcabf28d8089a2eca5e78b7d135d27fa971878a1d0a9b5eba621edfb2d0a028c5c243e24bb535c9a80a548d83c390c0c4c0b86eb1e9c44483bc430a69f3d3e997106a9d5fe5511f63571cc85b2cae88567bb0005385d63132d0beb74a0df9964416f6dacf1363da92fe07d3b03916a2a98ec7e85a6ff262f609ffc1f1b64606f560fb5187b82fef475dfe415eea13e5509f5cd02fdffd114719f8b1ba1dcbf74cbe6ea9197f836ac73dd431c3bd7039f0393ac94d5c5ba1dbd51023240b8cd4bba3ee01ea668c936919a440ab68f2bc63c971f242fe10260356b9da2b25d4d8fc5434be5f4415b8d52bdd96a46164d7414efb9817065b34dd96cbb55fac8bad85bac3b288ac8c9bd112983fdb8825ac9789bf66c56a1b9366a6845dc9fcedc94754fe30b24ddfbeeced97adf1c05d46ef4c1380ce397bffa815322dae451959782626dbbcd11f8cfc84045fa4e0e5a8074bfd87ed7a8c3d98a50c6d5f6bc5576da3e9594308890f3786653bcf3a58dbde2519b0cc68940562b102632f75b0a75f9a9da22a452e83d31fdd663dc897c27cc4e32fecead9fe4daf008e27c2f95aaca3ebd2008f993cae7a8892aa0aab87753138e2a7cb6325474a8291c129f543f27ae64d919dd8cda972cd5b402bb578a6467372bf89182df985b159f2344f5f9ac754ea592af7d89deb4f6398f215185d59df4e7042fdc969158348b1b635c41b061b58222d1b010ab4c6b2ddb9222fae650588172ab8d5531f53e90223a6dbcd1d7f630b958122bdfaf86550b0a7cc06d10a2d438097a9f9930312af51ba754022442b1336816a8aa4cb74403d80d5644c8fa7cd757edd086c1ebb974a8c3572c674c5808799569c016ceda321db6ec8f53e0663de5733615656281c6f631eae22076575f2223c0fc74e8636c046856807f95f9bee99b230161a375a01b22ee2d76243053dfa3d555a775baad65b4fc66ca44f57e6b0cc1d6d31d2a0a390ff9e6c0c08061b9606135f1e42dad7dc9ec2ca5340ad9400dec79934bf018632bae99197fb3aef786f8be7d700341619afeef79784ca564c4ee2869cf97164f961d6cbf2f8be03bdb5074d5746f621e0360d55cf68a47dcee6d61ae7eace6a9dedc38c76effe93be21ff07600f51f4d00a954f0fc2511bbb848977c5238b3599a4103b9f696169396cc5d729b7841428fbc43bca6b317e7b6ef1566a2b10dbdb0690380f18545a014fffa0abea33ccf713cf223d3a2f9c2b0ffd105f36da80fb12b3c735e044438d4411090457f869a6426ab1a2d5aef1f1da4131e4fcdb4019beab9ee3b620ab6b86363475cf284fb9c97ad05f4fbd917b82e261b7c6b7602db8f3afb5e747e0e5f8428298f10cf97f7f24b82cc8709a1108c715b24dc89b8f2c39606c7d85cc17d3eea50f6287a958bf8fdcc174d604ddb61e8c75fed33d60c643cac9a8046392fab97b2946f42cec7e931fbeaab4212904ff89df2870eb65e2a0e39361067d4b7869a376281683d34424470f267906c1a7a7a051523391447ad1ea3968fd48e4496fd8db6e25904df6fdff7a0fac6f22a272591fdb7db9d84401ef83ec884c8f7613c80937e442fb897b95b016331d3f646f4399ae1dea98b4313e8538cfb0cee8faf575bff7824cf1f3cde48960dbed86d7241ba3a9a2dee674beecc61c305c8c7f1cb6352a5c158dfb3b36a12baf8873f254f01d19b4852c8fefa5efd756e817845f4f5ae892def6be21a629c5af14574ea8baa55070181d913c2da2caa2c620d015abe91e0f10f73422bff86c1f8e47ea08dc697439d83b86f21fd6b2c042331085e810d52e7d2722f81a218ec52fa057eb4dc9ea952c8aeaaf17b4b65a273c541ddcaa004d8a38ad042440f5074c13019e6287be594eccd5bc324a15f1664d9f7eb095785d312362797f03cf4997d6d00cc25cc32ef214b2f0e838135a1429efc9a0160d5dffd599c158386a473365910bb2d7928220cf15f285aea9f13f2e6bcf42eba2edf53e0330f0d6448b354850c018f0e581266d3d832755e2aa48b36df0eb9fb7d2aea3223f1a1e44879f5dd2d937c7010552a5b5fa538b0b2cef78249e4f33da00c8445ecd19d58bf266e527e38619ebd3b592cde401fa6d42e3355052f0a30f06b272cf4401dca4cc7d1752c502772927bdcc8627e8e0a3d795c48c5fd804a93df3431be631cd683e533494c84c9f80f2e760d6e8ef620274bd7232f0ec5ac35a0451331777984ed762ee52065b95358f79b3991981aa1d0ceb3ab810f0ea210708ce999731084ee3b774da057d83c2d91384fe2c11736752344141f943c689af9d9534619bac593c5f03b3cee211017330a0b92d325ea5a5bf9d090723c96b75c6450625290eb56ba8e6decd21868ce758c7283ca9fe2f38c4a5112c2e3e913388246ca792d3b5054cbb1c7ddc59599016b082b62ba25ac40db325ec112c1a0c9ede4b760086983a915ecbbe4c5d1e72c50982d3f5e9865adb61da9d937d9c38d5a950a26d62d65ad9ba597c06aa55edfd2731ac1a1e0cf158fc2418fa2cc34eb5b907ccc9048", 0x1000}, {&(0x7f00000041c0)="8198c6ce1b92e6a8322b1d619245045d783d42335225ff995828d02a50116cc0c2aeda64ccadb67958d60ca323b14f832f40def79945686bde65911edc99b54c533847a6523f9429fb0b96de3d89116c80ab22642b23000367d184d903897029c3c8fc32e5ba63a88344c2651f67078a3218078e26e9bbbeda4ed7e3765f1b8c12b7b8ee212aa42ac01386f3ef01bb938659f5299d3be1abb3097306937b70fa4b1e388f16d93584b2544efb62dc93f3c84bc93e9a75965a08", 0xb9}, {&(0x7f0000004280)="5f98e399ebed8c3b3ae3acba4c0c114ba87c768fd1e1e99ff3b13b0c83a83ba4a64cba33c21f39e790ec296033c87f8401d1f0e37bb351bbe7cf4812f665bba6ea5ac5f3bd56bdffb3225f47ba35b47d4317fa4603658b046e28172b9404c97620b8b356dbb19fe1f08d7e2b77984777fe7e44c1c5f2b80b5437d5e26e98f3d6f0eb82c5af7f67518a152131cd5df39b5b56f5fe1251b9913a3173c5e75f286d6222bc5bb904751a74599a0d72f5c7a4014f609359d18da96886ff77d9fabd47539596edab97d15ae71e84f44f736978b34412c60e22c65bfe91b78ec333240ae12a790934dd323257", 0xe9}, {&(0x7f0000004380)="8e7520a97bb6c0851ae05ba02a0fb288cacb0e138e28cdce2fb76dd955ce7fa2eddb439843ba92b32a5e2922f39648fc", 0x30}], 0x6, &(0x7f0000004480)=[@cred={{0x1c, 0x1, 0x2, {r93, 0xee00, r97}}}], 0x20, 0x20028091}, {&(0x7f00000044c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004640)=[{&(0x7f0000004540)="bb01ebe60a907371a5d88b0c9a4c16a4c73414d9337b1b26cfac2f5200b4480401f344816db26e4cf563c8755cf4641f570358f68e8f41f649f5f83f00084409ad51906ec7ce92a784a5772a8832812ec7e984c62393ce6b34d996d3c7d42506094f19af616a26b148ea165222507b8ddc78afa34aeef5027e5bb7b082bc9ecfebc81e91ab8fc8c3bf56fbc42295877a2140d7f289de1b4fed5b9d0cc6c35e54a62a68ccc763849e4977ba9e0a5ba17547b7c48a8b4d2bf765ca28b035f4afa3b18edc98e9f9e341fb5021c181780bfb47c8", 0xd2}], 0x1, &(0x7f00000047c0)=[@cred={{0x1c, 0x1, 0x2, {r98, r99, r100}}}], 0x20, 0x4000}, {&(0x7f0000004800)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004980)=[{&(0x7f0000004880)="401b7ebe4a9808392a0551e6562e50b75695f9d5872ab6d47ecd891dd765cc5baadc0f809a1981a461ef83e8a66e64b0ca595e66ed663f6f", 0x38}, {&(0x7f00000048c0)="9874bb4ab4e3b56a122987ed0e8c29d746eb19a3b64eed1cb2cd6a2ebf3ddbe853aed2fcd56cfb274ff0b1724c2bcc79ae3613d6002775c757e0d3b24eeda31a5cc16044fccf44cf3270f64e4cca8a2f20e856eaab6782c4886a39157a15fcc51be9faa97bc047ec12890ec3d6a6cfd2fd488b3405feb76015af2dd9cca2852e4a131f12b475f4bb369ad1", 0x8b}], 0x2, &(0x7f0000004b40)=[@cred={{0x1c, 0x1, 0x2, {r101, r103, r104}}}, @rights={{0x10}}], 0x30, 0x440}, {&(0x7f0000004b80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005fc0)=[{&(0x7f0000004c00)="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", 0x1000}, {&(0x7f0000005c00)="531f838fd992018344631fc3e91b05f669c83f939ddcd0bdaec5c06ef1426022d84dd724834341b10cebd1a6902a94cc398b43d54e690417a9e4a2a49e514e9b47e75eaaf1e4f83b667ec92547323df80c06a922036f02229e8e4fbe60ab45a526e78ae7f8a37f1ba4b5140312fcaa10714022b596a35dc1e3d02aa0c2d1cd3c2fdc078e41085a1a829d66d802f7273849849cd8", 0x94}, {&(0x7f0000005cc0)="f7980cc655b6a6e01e499a80464d442fac0875dd6cb638630d19d01b09c218ce724eb3dbf6c501cfdcaa429b940cb8e0ceaa275d21d0a87c85b8f393b41dc974603b8183a2fa9b1a63ed71a290de8025fdb69299b56b6f9557917f505dc07d691d26c6615a11c67f9abd16bc0b83a2885dff9c41e21919a29cfb1a02633b05ab08b937ca30e7b1ab8c0a95b53c3dfd38a6724d12f7ea403b2b2180bcd196c3cf2c717e768584d2d9785a621e", 0xac}, {&(0x7f0000005d80)="8b73d10cff4252ef2685606d84a87fded69404c8d225374ad9e5956c8e94aa735fcdf19c8a9fb10374eb5272519ed52dc519687909bd61ab3cc3bdb15d262fa39c26831fce7df1777584c5b700bd118039a5e1d7abe7719b500aa9fa37213387eb33980493386c91cdfb166e9d9e0cbf47c0c9b296ff09cfd5115041f48e7116323283c77e95c0582f7e93c16b034fdef001f0592836f3517ec6886dec688b24a0a291a2eff0860da1822c38b34502f509151e1c0595ae97382c38248ef54072b74a4016b383ed80397680e92335d9556fe03a77191b4e5086fa824a8d9e5d66c61d9311fd628aa5505149eee99c936c489175a7a26a7703", 0xf8}, {&(0x7f0000005e80)="b2f1f71f77fa47a922a0f54760af582e44cd809ff3dc8be4df0ad04429837aa5e3fc5d3a80611af7238cbb403c4043aed4002b717b300e93b10b7be211254c392997d4e217", 0x45}, {&(0x7f0000005f00)="391f99e8f5", 0x5}, {&(0x7f0000005f40)="0087ab8f34ba460b26c36dce3f12bd6b2361f2a209bba024aafdf319ae945d10531c3a9036a989c1e8c2f4e3b136f4e3a05695428cdbeb75deb5a8fbb3e0475173f78a32cfd81502ae6840668e95", 0x4e}], 0x7, &(0x7f0000006100)=[@rights={{0x28, 0x1, 0x1, [r106, r107, r108, r109, r110, r111]}}, @rights={{0x18, 0x1, 0x1, [r112, r113]}}], 0x40, 0x40080}, {&(0x7f0000006140)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000061c0), 0x0, 0x0, 0x0, 0x40040c1}, {&(0x7f0000006200)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000006380)=[{&(0x7f0000006280)="84b425e5c047016f3864ce25470e82f590e1e289e23fd684eb1b2cb13cb0da98c25149a9d7cf224b039a1139978aff7480ca71aefba6806c9a5f0fa395dc2f2ddf839ca4300e13183b3840ac25fe882aae178cd88481b4192c1dc2c57877c3eb7cf581e207d999d3545a9f4a4e6d4e939adcf54a1ef8c48c86f554ee7672e9b16c46b354be2d2782424cc64557b5ce86484f682441579270fa10a3ee7ad8e535d8516d323b1799c2ba92", 0xaa}, {&(0x7f0000006340)="064b10c6c8ea3f84ab1811fa65be16bd44b79984d18a57d397ade21db4c53b627d7e0edf01c0030e070906fa4e8db1", 0x2f}], 0x2, &(0x7f0000006600)=[@cred={{0x1c, 0x1, 0x2, {r114, 0xee00, r118}}}, @cred={{0x1c, 0x1, 0x2, {r119, r121, r122}}}, @rights={{0x18, 0x1, 0x1, [r123, r124]}}, @cred={{0x1c, 0x1, 0x2, {r126, r127, r128}}}, @rights={{0x18, 0x1, 0x1, [r129, r130]}}, @cred={{0x1c, 0x1, 0x2, {r131, r133, r138}}}, @cred={{0x1c, 0x1, 0x2, {r139, r140, r144}}}, @cred={{0x1c, 0x1, 0x2, {r145, r147, 0xee01}}}], 0xf0, 0x4000}], 0xa, 0xb7dab229d1153ab0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r149 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r149, &(0x7f00000014c0)) [ 524.261446][T18966] device bridge153 entered promiscuous mode 06:01:52 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x0, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 524.322383][T18972] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 524.346303][ T26] audit: type=1804 audit(1582005712.307:394): pid=18970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/349/bus/file0" dev="overlay" ino=16644 res=1 [ 524.412243][T18972] device bridge153 left promiscuous mode [ 524.521997][ T26] audit: type=1804 audit(1582005712.437:395): pid=18978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/349/bus/bus/file0" dev="overlay" ino=16549 res=1 06:01:52 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x2000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:52 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r1 = geteuid() r2 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x48000) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r4, r5, 0x0, r5, 0x0, 0xb}, 0x0, 0xffc, 0x3, 0x0, 0x0, 0x0, 0x81}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1082044, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472616e733d6627db00c1022a2050061d579578b01864b20a66646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=none,loose,dfltgid=', @ANYRESHEX=r5, @ANYBLOB=',access=client,privport,obj_role=^}wlan0)system.,appraise,hash,obj_role=trans=fd,,fowner=', @ANYBLOB]) getgroups(0x7, &(0x7f00000000c0)=[0x0, 0xee01, 0xffffffffffffffff, 0xee00, r5, 0xffffffffffffffff, 0xee00]) write$P9_RGETATTR(r0, &(0x7f0000000300)={0xa0, 0x19, 0x1, {0x2000, {0x80, 0x4, 0x7}, 0x120, r1, r6, 0x2, 0x1, 0x1, 0x3, 0x2, 0x10001, 0x4, 0x74, 0x8000, 0x2, 0x3ff, 0x4, 0xfff, 0x81, 0xfffffffffffffffb}}, 0xa0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r7, &(0x7f00000014c0)) [ 524.770434][ T26] audit: type=1804 audit(1582005712.467:396): pid=18977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/349/bus/bus/file0" dev="overlay" ino=16549 res=1 06:01:53 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x0, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 525.067546][ T26] audit: type=1804 audit(1582005713.027:397): pid=18997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/350/bus/file0" dev="overlay" ino=16577 res=1 06:01:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:53 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x0, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 525.249971][ T26] audit: type=1804 audit(1582005713.157:398): pid=19007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/350/bus/bus/file0" dev="overlay" ino=16722 res=1 06:01:53 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:53 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)={0x14, r4, 0x76b1cb6bc7622569, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0xd8, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x341}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x21d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8df6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20044040}, 0xc0080) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0xfffffe3e) getsockname(r5, &(0x7f0000000340)=@nl=@proc, &(0x7f00000003c0)=0x80) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000004c0)={0xa30000, 0x100, 0x101, r6, 0x0, &(0x7f0000000440)={0x9c0908, 0x0, [], @p_u16=&(0x7f0000000400)=0x9}}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x589400, 0x0) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(r8, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={0x54, r9, 0x10, 0x70bc29, 0x25dfdbfc}, 0x16}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r9, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20005041}, 0x40) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) r10 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r10, 0x0, 0x40d09) [ 525.464508][ T26] audit: type=1804 audit(1582005713.177:399): pid=19004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/350/bus/bus/file0" dev="overlay" ino=16722 res=1 [ 525.498666][T19018] device bridge154 entered promiscuous mode [ 525.540227][T19023] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 525.578022][T19023] device bridge154 left promiscuous mode 06:01:53 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x0, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:53 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:53 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) lgetxattr(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)=@random={'btrfs.', 'overlay\x00'}, &(0x7f00000001c0)=""/83, 0x53) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000340)={0x907d, 0x2, 0x4, 0x10000, 0x14, {0x0, 0x7530}, {0x3, 0x1, 0x0, 0x22, 0x7, 0x1, "0a5bbbc1"}, 0x401, 0x4, @planes=&(0x7f0000000300)={0x5, 0x80000000, @userptr=0x7ff, 0x3}, 0x1dc7, 0x0, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x2) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r2, &(0x7f00000014c0)) 06:01:53 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x4000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:54 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:54 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:54 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x5000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:54 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x101200, 0x4) fchdir(r2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) [ 526.732754][T19058] device bridge155 entered promiscuous mode [ 526.820928][T19066] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 526.902272][T19066] device bridge155 left promiscuous mode 06:01:54 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:55 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xb3) lsetxattr$security_capability(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v1={0x1000000, [{0x0, 0x1}]}, 0xc, 0x2) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000014c0)) mkdir(&(0x7f0000000200)='./file1\x00', 0x105) 06:01:55 executing program 2: mkdir(0x0, 0x0) chdir(0x0) syz_read_part_table(0x3ff, 0x5, &(0x7f0000000180)=[{&(0x7f00000000c0)="79cae175248c9cef98228a5876c4170b665a9aa51874bf5f85ac779791291cde00ac23b929fae83a4215240140e3d603a173c45d85c850416f2dc9e803b7c5413a02ac79b9a8e528c249cc982b7558573e636099bdd75a7db241cb3dc8df178a2d284c68f6a9efea4995c045c7ca5515842df175b2743f552b71", 0x7a, 0xf7}, {&(0x7f0000000140)="d6df66c4f9054aa21f0deb6d4396ca3776e8bd9b4b6541abba9d80284be76fe9eade3fa817fd9d2a7d934ed7ad0587b364", 0x31, 0x8}, {&(0x7f0000000240)="0530f1a5519b8cc44d60e73018010efb9b6540e2997dab2b96b107960eedfe1d13d97a72e57407e528b1200c32db20f0005a62ea717e413e5ac1baccd0035ab7733271d237800bb3e78dd52e4765fc6a8f2e92314db63128cb174883b0d9b541b511b0c9eeafadc701240241a958c6b3aadc63010585cc25bf7d03b2ac613fd47f9baa", 0x83, 0x7}, {&(0x7f0000000300)="2cbc2bb8933fd77af7bd72694f93f36d85278b9468afb4e1575e179a3b7e7d80924b7891f5eed548a6562329d6e19b19a9b53f256d6474ea216ad110b4c8c0aebcdb3f7a1bc3252179a163df444d2f5620075c3323a8e3b8f755ed3c028881140ea262345e83839503f6350ace804c0d2a9647a4e90e5f6bffc295cf51d4b3250cef732061e0f4e4af91794c255c7f9c543b92b8e3a7717cbccfc4c56982ad2c2bb9a018e47b5568995ea14c3c165625258222521d21adc9b244999d577e9da79075071b35a382b2161a66cf3dc24cba0b12b38eb8aad67797325a21e163faff2b6de2adc5", 0xe5, 0x8000}, {&(0x7f00000004c0)="04ae0d975252dadadb2865ad03b9e685e3b3f407fb8784614bdde307cfbbe02a7d2e488a409afb927f57d572363d4ac5b77f0a74bfad1fc02578f963c57234e196f13ff1d025098d7ffe648557cf4c900b9501e3f8544a6ea558c1240b45d4124d88fffd4a6c4404c7dce7badc658cbd07d73c49c9a6ffbbd359114f94509c9c46596f8c55a3ff9b4b63ac8d235e573777f6fd14e0dd652fd529c11546c2c0c6862864621ae57b4edf6ace8163197efc3ce5614e40dd5a02b5", 0xb9, 0xd1b}]) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000002c80)={0x1, 0x1e70, [0x77dd, 0x3ff, 0x7, 0x9, 0x8], 0x5b00}) syz_mount_image$btrfs(&(0x7f0000000400)='btrfs\x00', &(0x7f0000000440)='./bus\x00', 0x4, 0xa, &(0x7f0000002980)=[{&(0x7f0000000580)="5930af054c77140296395be0cbd907612c1687ac081d6a", 0x17, 0x9}, {&(0x7f00000005c0)="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", 0x1000, 0x7fffffff}, {&(0x7f00000015c0)="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", 0x1000, 0x2}, {&(0x7f00000025c0)="5c2ef350d6dc271865bb722c3f71ad0dc6a0700b64b14719a19e957ec9e2530d88eda9a3593a9a24d94e1bcc9dd5e5ef0807fdf5de2bf2bfa3bc9433dd0dcb9a260188747752a76a8314f1cd537854664be83339285095905ad808ffec8a21052de3354bdaa0bf733c5056fba7b4313f358d0d7898e0c6d84ca02d128dd6b7bedd3527f54346078f1190fd051260bae0f9d9e5735e51b9c9c45175b1", 0x9c, 0x7}, {&(0x7f0000002680)="ef06b94df6ae969bdf4f3a772a3577ea739cd8714d4eeb074f39aa995f67e1b1d17fdaad8a11a5da3d28735ff2b44c81f64847b9574c71", 0x37}, {&(0x7f00000026c0)="ed0db89051b28089c356c07fa5cc7f7563e341ac804126a1390efbf2eea67843578f64c9ad228ee05de787295d3e87c537cfed2ee977fc6b27eaf01e262a2a9aaee491992022ec2d5b128b6fcac4d73b7cff4263e79ce69e10efdcca8179201d68667e6e18a487a92c4e47784bfc1718279f0828622e2e69119ed3cfcc7473af217d1b7b6e81c9cbb8fb30a4ca2eb4316fc64274537f7dbe65bfc09e43cf03b842ad7162cc3b4c7cae04d767a8ce929f09ed5e", 0xb3, 0x6}, {&(0x7f0000002780)="79a24ed9bc8b5aca9a819b010a3a2c0c7a47efc4ddc28d05ab74433123f7b7ac5b3892beacd8a4fc1eecbd32c79733f91cafb27341d838f92d396b12926da7360557b8adbe0e66938d2c855120b6ed8b7cd2746a", 0x54}, {&(0x7f0000002800)="5e5f20d36a1c8dde690051fe11aaa1c81e114f8015a134298ec70c6ee2a5a28d07d03fd11feacddc146d3c298daa5c265b0536224f080f11ad5bc76c60a277bbdaa311f0738371d8fd9f171a7f7d51622e51dd8da6496dfea1d20e09920461b75d3c85a2b77195dde759450b7775e54f7b94eadc3ede447dda3a14202de1ccc38823686136c412f8d7b6a2db131f7c0f7758cbda325d958433d80ab6378b9c548cdf0811e1e2e53242f594277e64b1e4a1d3ebdf57a7f1f6b425a4bf93f2ea162b5ce2422cf80469f5f2c1f8d9e04c33b66e734eb2530f69d1f43ae61c94feb2967e67c446", 0xe5, 0x1}, {&(0x7f0000002900), 0x0, 0x9}, {&(0x7f0000002940)="6aad49661199a698f4d9f2dfe64e16712b9fcd748ab78fad4a90375e1bdb0cf5bcb3b9", 0x23}], 0x3020080, &(0x7f0000002a80)={[{@nodatasum='nodatasum'}, {@check_int_print_mask={'check_int_print_mask', 0x3d, 0xffffffffffffffc1}}, {@noinode_cache='noinode_cache'}], [{@context={'context', 0x3d, 'system_u'}}, {@smackfsroot={'smackfsroot', 0x3d, ','}}, {@subj_role={'subj_role'}}, {@smackfsdef={'smackfsdef', 0x3d, 'selfmime_type'}}]}) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1, 0x90001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000002900)={0x2, 0x0, @loopback}, &(0x7f0000002b40)=0x10, 0x80800) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000002bc0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000002b80)=[{}, {}, {}], 0x0, [{}]}, 0x88) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 06:01:55 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:55 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x6000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:55 executing program 3: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)={0x14, r4, 0x76b1cb6bc7622569, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0xd8, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x341}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x21d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8df6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20044040}, 0xc0080) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0xfffffe3e) getsockname(r5, &(0x7f0000000340)=@nl=@proc, &(0x7f00000003c0)=0x80) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000004c0)={0xa30000, 0x100, 0x101, r6, 0x0, &(0x7f0000000440)={0x9c0908, 0x0, [], @p_u16=&(0x7f0000000400)=0x9}}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x589400, 0x0) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(r8, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={0x54, r9, 0x10, 0x70bc29, 0x25dfdbfc}, 0x16}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r9, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20005041}, 0x40) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) r10 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r10, 0x0, 0x40d09) 06:01:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:55 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) execve(&(0x7f0000000140)='./bus\x00', &(0x7f0000000480)=[&(0x7f00000001c0)='memory.events\x00', &(0x7f0000000200)='memory.events\x00', &(0x7f0000000300)='overlay\x00', &(0x7f0000000340)='\xe0*keyringeth1\x00', &(0x7f0000000380)='memory.events\x00', &(0x7f00000003c0)='.\x00', &(0x7f0000000400)='overlay\x00', &(0x7f0000000440)='\x00'], &(0x7f0000000580)=[&(0x7f00000004c0)='\x00', &(0x7f0000000500)='overlay\x00', &(0x7f0000000540)=',+!.{\x00']) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0)) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000014c0)) 06:01:55 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000440)='./bus\x00', &(0x7f00000004c0)='trusted.overlay.nlink\x00', &(0x7f0000000500)={'L-', 0x9c7}, 0x16, 0x3) ioctl$SNDRV_PCM_IOCTL_XRUN(0xffffffffffffffff, 0x4148, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000340)='/dev/md0\x00', 0x8003, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000380)={0x0, {}, 0x0, {}, 0x400000, 0x0, 0x14, 0x8, "547971b93cd2cb6f77aa51b22b2972f692423831feb22277f527551d0aecc86007580f02334172e87d66e6721187615de05eb9c7b605ef6ef686789ab183d208", "a959a85f34cf182374599e5292b1d80eb15f7e18ea8adc43d931b4e5e3c32810", [0x80000001, 0x1]}) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./bus\x00', 0x20, 0x2, &(0x7f0000000180)=[{&(0x7f0000000240)="b175d3330e5197df6d8a36e7577f613afe132d6c9bad2fc0f9105b645f6c73c417e8ad77e44f983fce2501628e5b8ee0f089437ea5e7bd39687a1db2f6047a8f3ed3c4a217eb4c15b1e14373595d6cb4daada1f6737f01c010612ea3ea79cc92e184c0ac1f66010aebde2e4d4a4d5b4336349502a398bcc9f108027979f3d652885b37d0853ed1923da97115a5fdf41da4d850a08ebdc2c6dc84530c440fe9b955850fb857f7bde242a1d71ebf56ccbb6383080bdddc6db1ca6fe04a9b2981dd92c1a6f1fd5e7e8d77e72d", 0xcb, 0x100000001}, {&(0x7f0000000140)="0424fb80e1b459d375975d027c61", 0xe, 0x3ff}], 0x94000, &(0x7f00000001c0)={[{@uni_xlateno='uni_xlate=0'}, {@uni_xlateno='uni_xlate=0'}, {@numtail='nonumtail=0'}], [{@pcr={'pcr', 0x3d, 0x33}}]}) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) [ 527.957411][T19110] device bridge156 entered promiscuous mode [ 527.983469][T19110] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:01:56 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 528.003902][T19110] device bridge156 left promiscuous mode [ 528.019956][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 528.019975][ T26] audit: type=1804 audit(1582005715.977:414): pid=19111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/354/bus/file0" dev="overlay" ino=16657 res=1 [ 528.179716][T19113] [ 528.182096][T19113] ====================================================== [ 528.189219][T19113] WARNING: possible circular locking dependency detected [ 528.196255][T19113] 5.6.0-rc2-syzkaller #0 Not tainted [ 528.201542][T19113] ------------------------------------------------------ [ 528.208570][T19113] syz-executor.0/19113 is trying to acquire lock: [ 528.214985][T19113] ffff888098f77690 (&ovl_i_mutex_dir_key[depth]){++++}, at: path_openat+0x1c1f/0x3490 [ 528.224571][T19113] [ 528.224571][T19113] but task is already holding lock: [ 528.231951][T19113] ffff88809e901810 (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x2270 [ 528.242182][T19113] [ 528.242182][T19113] which lock already depends on the new lock. [ 528.242182][T19113] [ 528.252596][T19113] [ 528.252596][T19113] the existing dependency chain (in reverse order) is: [ 528.261729][T19113] [ 528.261729][T19113] -> #3 (&sig->cred_guard_mutex){+.+.}: [ 528.269485][T19113] __mutex_lock+0x156/0x13c0 [ 528.274611][T19113] mutex_lock_killable_nested+0x16/0x20 [ 528.280830][T19113] lock_trace+0x4a/0xe0 [ 528.285562][T19113] proc_pid_stack+0xbf/0x200 [ 528.290683][T19113] proc_single_show+0xfd/0x1c0 [ 528.296203][T19113] seq_read+0x4ca/0x1170 [ 528.300961][T19113] do_iter_read+0x4a4/0x660 [ 528.305988][T19113] vfs_readv+0xf0/0x160 [ 528.310675][T19113] default_file_splice_read+0x4fb/0xa20 [ 528.316767][T19113] do_splice_to+0x127/0x180 [ 528.321890][T19113] splice_direct_to_actor+0x320/0xa30 [ 528.327790][T19113] do_splice_direct+0x1da/0x2a0 [ 528.333174][T19113] do_sendfile+0x597/0xd00 [ 528.338125][T19113] __x64_sys_sendfile64+0x1dd/0x220 [ 528.343884][T19113] do_syscall_64+0xfa/0x790 [ 528.348910][T19113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 528.355306][T19113] [ 528.355306][T19113] -> #2 (&p->lock){+.+.}: [ 528.361838][T19113] __mutex_lock+0x156/0x13c0 [ 528.366951][T19113] mutex_lock_nested+0x16/0x20 [ 528.372240][T19113] seq_read+0x71/0x1170 [ 528.377038][T19113] do_iter_read+0x4a4/0x660 [ 528.382082][T19113] vfs_readv+0xf0/0x160 [ 528.386910][T19113] default_file_splice_read+0x4fb/0xa20 [ 528.392963][T19113] do_splice_to+0x127/0x180 [ 528.397991][T19113] splice_direct_to_actor+0x320/0xa30 [ 528.403867][T19113] do_splice_direct+0x1da/0x2a0 [ 528.409351][T19113] do_sendfile+0x597/0xd00 [ 528.414295][T19113] __x64_sys_sendfile64+0x1dd/0x220 [ 528.420027][T19113] do_syscall_64+0xfa/0x790 [ 528.425061][T19113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 528.431462][T19113] [ 528.431462][T19113] -> #1 (sb_writers#4){.+.+}: [ 528.438339][T19113] __sb_start_write+0x241/0x460 [ 528.443713][T19113] mnt_want_write+0x3f/0xc0 [ 528.448744][T19113] ovl_want_write+0x76/0xa0 [ 528.453774][T19113] ovl_create_object+0xb3/0x2c0 [ 528.459245][T19113] ovl_create+0x28/0x30 [ 528.463934][T19113] lookup_open+0x12d5/0x1a90 [ 528.469035][T19113] path_openat+0xf2c/0x3490 [ 528.474060][T19113] do_filp_open+0x192/0x260 [ 528.479084][T19113] do_sys_openat2+0x5eb/0x7e0 [ 528.484287][T19113] do_sys_open+0xf2/0x180 [ 528.489131][T19113] __x64_sys_openat+0x9d/0x100 [ 528.494419][T19113] do_syscall_64+0xfa/0x790 [ 528.499556][T19113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 528.505956][T19113] [ 528.505956][T19113] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}: [ 528.514141][T19113] __lock_acquire+0x2596/0x4a00 [ 528.519516][T19113] lock_acquire+0x190/0x410 [ 528.524531][T19113] down_read+0x95/0x430 [ 528.529213][T19113] path_openat+0x1c1f/0x3490 [ 528.534327][T19113] do_filp_open+0x192/0x260 [ 528.539359][T19113] do_open_execat+0x137/0x690 [ 528.544562][T19113] __do_execve_file.isra.0+0x16d5/0x2270 [ 528.550725][T19113] __x64_sys_execve+0x8f/0xc0 [ 528.555929][T19113] do_syscall_64+0xfa/0x790 [ 528.560955][T19113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 528.567378][T19113] [ 528.567378][T19113] other info that might help us debug this: [ 528.567378][T19113] [ 528.577608][T19113] Chain exists of: [ 528.577608][T19113] &ovl_i_mutex_dir_key[depth] --> &p->lock --> &sig->cred_guard_mutex [ 528.577608][T19113] [ 528.591672][T19113] Possible unsafe locking scenario: [ 528.591672][T19113] [ 528.599279][T19113] CPU0 CPU1 [ 528.604643][T19113] ---- ---- [ 528.610006][T19113] lock(&sig->cred_guard_mutex); [ 528.615025][T19113] lock(&p->lock); [ 528.621454][T19113] lock(&sig->cred_guard_mutex); [ 528.628999][T19113] lock(&ovl_i_mutex_dir_key[depth]); [ 528.634452][T19113] [ 528.634452][T19113] *** DEADLOCK *** [ 528.634452][T19113] [ 528.642599][T19113] 1 lock held by syz-executor.0/19113: [ 528.648071][T19113] #0: ffff88809e901810 (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x2270 [ 528.658692][T19113] [ 528.658692][T19113] stack backtrace: [ 528.664585][T19113] CPU: 0 PID: 19113 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 [ 528.673259][T19113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.683319][T19113] Call Trace: [ 528.686631][T19113] dump_stack+0x197/0x210 [ 528.691016][T19113] print_circular_bug.isra.0.cold+0x163/0x172 [ 528.697074][T19113] check_noncircular+0x32e/0x3e0 [ 528.701997][T19113] ? print_circular_bug.isra.0+0x230/0x230 [ 528.707801][T19113] ? avc_has_extended_perms+0x10f0/0x10f0 [ 528.713503][T19113] ? alloc_list_entry+0xc0/0xc0 [ 528.718341][T19113] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 528.724575][T19113] ? find_first_zero_bit+0x9a/0xc0 [ 528.733843][T19113] __lock_acquire+0x2596/0x4a00 [ 528.738678][T19113] ? find_held_lock+0x35/0x130 [ 528.743429][T19113] ? mark_held_locks+0xf0/0xf0 [ 528.748187][T19113] lock_acquire+0x190/0x410 [ 528.752690][T19113] ? path_openat+0x1c1f/0x3490 [ 528.757451][T19113] down_read+0x95/0x430 [ 528.761610][T19113] ? path_openat+0x1c1f/0x3490 [ 528.766384][T19113] ? down_read_killable+0x490/0x490 [ 528.771714][T19113] path_openat+0x1c1f/0x3490 [ 528.776333][T19113] ? path_mountpoint.isra.0+0x370/0x370 [ 528.781905][T19113] ? security_prepare_creds+0x11d/0x190 [ 528.787497][T19113] ? prepare_creds+0x4bd/0x6b0 [ 528.792253][T19113] ? prepare_exec_creds+0x12/0xf0 [ 528.797274][T19113] ? __do_execve_file.isra.0+0x393/0x2270 [ 528.802984][T19113] ? __x64_sys_execve+0x8f/0xc0 [ 528.807831][T19113] ? do_syscall_64+0xfa/0x790 [ 528.812504][T19113] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 528.818576][T19113] ? __kasan_check_read+0x11/0x20 [ 528.823597][T19113] ? __lock_acquire+0x8a0/0x4a00 [ 528.828520][T19113] do_filp_open+0x192/0x260 [ 528.833007][T19113] ? may_open_dev+0x100/0x100 [ 528.837672][T19113] ? mark_lock+0xc2/0x1220 [ 528.842079][T19113] ? __kasan_check_read+0x11/0x20 [ 528.847100][T19113] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 528.853066][T19113] ? __do_execve_file.isra.0+0x7d4/0x2270 [ 528.858769][T19113] do_open_execat+0x137/0x690 [ 528.863433][T19113] ? unregister_binfmt+0x170/0x170 [ 528.868525][T19113] ? lock_downgrade+0x920/0x920 [ 528.873357][T19113] ? lock_downgrade+0x920/0x920 [ 528.878219][T19113] ? do_raw_spin_unlock+0x181/0x270 [ 528.883429][T19113] __do_execve_file.isra.0+0x16d5/0x2270 [ 528.889057][T19113] ? copy_strings_kernel+0x120/0x120 [ 528.894329][T19113] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 528.900550][T19113] ? getname_flags+0x277/0x5b0 [ 528.905296][T19113] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 528.911344][T19113] __x64_sys_execve+0x8f/0xc0 [ 528.916005][T19113] do_syscall_64+0xfa/0x790 [ 528.920503][T19113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 528.926376][T19113] RIP: 0033:0x45c6b9 [ 528.930272][T19113] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 528.949880][T19113] RSP: 002b:00007fe351b7bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 528.958272][T19113] RAX: ffffffffffffffda RBX: 00007fe351b7c6d4 RCX: 000000000045c6b9 [ 528.966226][T19113] RDX: 0000000020000580 RSI: 0000000020000480 RDI: 0000000020000140 [ 528.974181][T19113] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 06:01:56 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:56 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 528.982142][T19113] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 528.990097][T19113] R13: 00000000000000a6 R14: 00000000004c3207 R15: 000000000076bf2c [ 529.025663][ T26] audit: type=1804 audit(1582005716.057:415): pid=19119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/355/bus" dev="sda1" ino=16525 res=1 [ 529.109682][ T26] audit: type=1804 audit(1582005717.017:416): pid=19132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/355/bus" dev="sda1" ino=16525 res=1 [ 529.141539][ T26] audit: type=1804 audit(1582005717.077:417): pid=19131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir991788372/syzkaller.xRAgmo/345/bus" dev="sda1" ino=16536 res=1 06:01:57 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x9) 06:01:57 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) lstat(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x5, 0x4, &(0x7f0000000400)=[{&(0x7f00000001c0)="e7582ff0951e09c1e73ea0609f6e6a3df69a33af1b011efcd249b214c8392c5c79e04d25a09bc9a2775ef7b66f3c47a9a554843d6836767c7d36888fbace31e8bf5c8d9f1b1214e1f170b8685fece087d2c98d39d2e0e2db", 0x58, 0x4}, {&(0x7f0000000300)="0ea25613b75b6daa48b44a00cc222620222206046ebe682ab3acfea22d4f3ec27e1ec11696e571bbb85b2baaa8982621282ce9223bca51a47b84a34dd43904cbfb1b578acd8f32b68ff2", 0x4a, 0x4}, {&(0x7f0000000380)="a5dc5fe5f8fbb5ceac7268aeecfaadad8b97ad3c2648e7eaabf68f98194a330bbc428ce4db84691508", 0x29, 0xc73}, {&(0x7f00000003c0)="dbb8475e60a97d9c715b157259b83ed709e4245bdc5560fc04a4636a93a18b7dda494a8f317e6057381cbea0dade9b638aab568e9ad8d8bafa064d5535f7ff4b", 0x40, 0x5f}], 0x20, &(0x7f0000000540)={[{@part={'part', 0x3d, 0xae0a}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@codepage={'codepage', 0x3d, 'utf8'}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}], [{@fowner_gt={'fowner>', r1}}, {@appraise='appraise'}]}) fstat(r0, &(0x7f00000014c0)) 06:01:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:57 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:57 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 529.326629][ T26] audit: type=1804 audit(1582005717.287:418): pid=19140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/355/bus/file0" dev="overlay" ino=16525 res=1 [ 529.479640][ T26] audit: type=1804 audit(1582005717.437:419): pid=19151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/355/bus/bus/file0" dev="overlay" ino=16551 res=1 [ 529.569684][T19149] device bridge157 entered promiscuous mode 06:01:57 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x8000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:57 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 529.638258][T19161] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 529.711247][T19161] device bridge157 left promiscuous mode [ 529.759926][ T26] audit: type=1804 audit(1582005717.437:420): pid=19153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/356/bus" dev="sda1" ino=16552 res=1 06:01:57 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:57 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r5 = getpid() ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000080)={&(0x7f0000000400)=""/63, 0x3f}) r6 = getpid() ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000080)={&(0x7f0000000400)=""/63, 0x3f}) r7 = getpid() ptrace(0x10, r7) ptrace$getregset(0x4205, r7, 0x202, &(0x7f0000000080)={&(0x7f0000000400)=""/63, 0x3f}) write$binfmt_script(r2, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r1, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYRESOCT, @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX=r3, @ANYPTR, @ANYRES16, @ANYRESOCT=r4, @ANYRESHEX=r5], @ANYRESOCT, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESHEX=r2, @ANYRES16=r6, @ANYRESDEC, @ANYBLOB="27df213df61dd16e9c2765eae297ed0918524aa4a8a3a1637cee9eef5d6225d1b77ed8c6e6a69d11822255bd028ba8d86f54e25851ed0fdec03af0074e2b06b0f24e87b12ad67b0c0c29a709244091ec165737b012ceb823ad739a3fe576481432995c8c596f85aaf6197957684c90c36798162bba707b7fbe0015a8bc3b96a8cf84145b285ad94f06a42ceb3118e26829076204967f11fb04b04634183f0409d7662c0faf0ecb3d47e2a0aaf54e73bda32a"], @ANYRESOCT=0x0], @ANYRES64, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRESOCT=r7]], 0x41) unlinkat(r2, &(0x7f00000000c0)='./bus\x00', 0x200) r8 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r8, 0x0, 0x40d09) 06:01:57 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 529.869606][ T26] audit: type=1804 audit(1582005717.667:421): pid=19162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/356/bus" dev="sda1" ino=16552 res=1 [ 529.947525][T19168] overlayfs: failed to resolve './file0': -2 06:01:57 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:58 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,work$ir=./file1,u./file0']) chdir(&(0x7f00000002c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x1, 0x8, 0x1ff, 0x2, 0x8, 0x1ff}) fstat(r0, &(0x7f00000001c0)) 06:01:58 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3f000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 530.186844][ T26] audit: type=1804 audit(1582005717.887:422): pid=19172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/356/bus/file0" dev="overlay" ino=16625 res=1 06:01:58 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 530.313997][T19202] overlayfs: unrecognized mount option "work$ir=./file1" or missing value [ 530.355465][ T26] audit: type=1804 audit(1582005718.007:423): pid=19192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/357/bus" dev="sda1" ino=16485 res=1 [ 530.397956][T19202] overlayfs: unrecognized mount option "work$ir=./file1" or missing value 06:01:58 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:58 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000003c0)) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)={0x14, r3, 0x76b1cb6bc7622569, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x60, r3, 0x5220ec9564870ac2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xae0}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x635}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x80) fstat(r0, &(0x7f0000000340)) 06:01:58 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) [ 530.558253][T19214] device bridge158 entered promiscuous mode [ 530.586457][T19214] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 530.596719][T19214] device bridge158 left promiscuous mode 06:01:58 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0xfdfdffff, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:58 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f00000004c0)=@v2={0x3, 0x3, 0x10, 0x570, 0xec, "a5e4d3fec7b40fa05ddc0c772a01944d3d25ec20a9fb497610d72c559886818872e05b300084dc122b6bedcdc786533bd8788197eddc7f79be139dc504ac3649b0a50012290f0c9ada8f2d94c0471d1badce106046bba81007413266dceb76af063c449f5e49c755c1976a20286ffb9d063724490a5888babcc8fc5d95cc80a0609a2953bcb0fd08e1c9cf7ac4fbc41624dc396328c122eeccbc6b2a55ad6660f2731df510f41a037375554954b4c9d716596640c550239d460f4e5d20bf4bdeb81b9130d9c341a988a246070098a539780822cc8bc7ac9bf505996a23a08c786e08b9128fea6411159d21e9"}, 0xf5, 0x2) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10001, 0x3}, 0x200, 0x800, 0x50, 0x0, 0xfffffffffffffffe}, 0x0, 0x7, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@loopback, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) getsockname$packet(r2, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002b40)=0x14) recvmmsg(r0, &(0x7f0000005040)=[{{&(0x7f0000002c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000002d00)=""/225, 0xe1}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/148, 0x94}, {&(0x7f0000003ec0)=""/16, 0x10}, {&(0x7f0000003f00)=""/4096, 0x1000}], 0x5, &(0x7f0000004f80)=""/136, 0x88}, 0x40}], 0x1, 0x0, &(0x7f0000005080)={0x0, 0x989680}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000002c00)=@ipv6_newroute={0x1c, 0x18, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x80, 0x20, 0x3, 0xfe, 0x4, 0xc8, 0x4, 0x100}}, 0x1c}, 0x1, 0x0, 0x0, 0x8d0}, 0x80) 06:01:58 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:58 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:59 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 531.106758][T19248] device bridge159 entered promiscuous mode [ 531.145962][T19253] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 531.156729][T19253] device bridge159 left promiscuous mode 06:01:59 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x1, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:59 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0xff000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:01:59 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) fstat(r1, &(0x7f00000001c0)) 06:01:59 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x0, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:59 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 531.574706][T19270] device bridge160 entered promiscuous mode 06:01:59 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f0000000140), 0x4, &(0x7f0000000240)={[{@space_cache_v1='space_cache=v1'}, {@check_int='check_int'}, {@flushoncommit='flushoncommit'}, {@nodatasum='nodatasum'}, {@compress='compress'}, {@space_cache_v2='space_cache=v2'}, {@nodatasum='nodatasum'}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@audit='audit'}, {@appraise_type='appraise_type=imasig'}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x61, 0x65, 0x61, 0x33, 0x33, 0x37, 0x63], 0x2d, [0x30, 0x30, 0x35, 0x35], 0x2d, [0x63, 0x61, 0x32, 0x35], 0x2d, [0x36, 0x35, 0x66, 0x39], 0x2d, [0x61, 0x31, 0x38, 0x62, 0x58, 0x36, 0x36, 0x63]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'securitylomd5sum/md5sumem1'}}]}) sendfile(r0, r1, 0x0, 0x40d09) [ 531.622953][T19276] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 531.657563][T19276] device bridge160 left promiscuous mode 06:01:59 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x0, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:01:59 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0xfffffdfd, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:59 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:01:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 532.117216][T19308] device bridge161 entered promiscuous mode 06:02:00 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x0, {0xb, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 532.174420][T19312] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 532.203478][T19312] device bridge161 left promiscuous mode 06:02:00 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x1000000000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:02:00 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:02:00 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 06:02:00 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f62757308336f726b6469723d2e2f66696c65312c75707065726469723d2e2f4a696c653087da9a0d5b30f7cecde1d2365d94f46e42e4f9ca026962f5fa33d2deae9af4e9b9c8d81c4f3b7df9daea8a62934518e002c355913b11198bdfff38f553ef087f7473d4e58ec3f0bff76d7f4f3703d90f54ee54d0d4e475abc5075b37595f685f4c76f5584ee0c9b404709f1d27e139f3955b4dad36a80ee44d1db0b448fdfae8defc66921c7ab92421c170caba1e64a0cf0b93c537334c988646ebec83906afae1150e9adc1cfa3ed8a5357411d69b74faeb35d62d4ec83330b98f0c647f4f929d341576a10c42971a8673529d93d4e7601249e9fee7bf72224bb950d119821f551fba8f0b323affdf5bc71b"]) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000014c0)) 06:02:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc618000000000000"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:02:00 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0x0, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 532.639693][T19337] device bridge162 entered promiscuous mode [ 532.650546][T19337] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 532.679562][T19337] device bridge162 left promiscuous mode [ 532.773951][T19347] overlayfs: missing 'workdir' 06:02:00 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x208000, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=0x4) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r3 = semget(0x2, 0x2, 0x400) sendmsg$sock(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x5c, &(0x7f0000001880)=[{&(0x7f0000000380)="b0efa91d2e04e0784353d53ba8e518b069387b0d44293f6fcce7ad0888ef937a89fedaea748e6d4a0028afeac1fbfde54f3abe2ecece7b3c71e61288d1b1047cbe0c2e84fb5ff60186e6506347941e18a42d80440565247cd2ac8820e072401cdf6b5ca4fc423106154483f67144d2e810575a484905a7178d5d02a88ddf1801ff351f324f5d1981c3f8e9f48ea00c539ef66556c95b90fb10127bb5db96e7268610545d6daf6fbb03", 0xa9}, {&(0x7f0000000600)="c4cc0de6fbe368bb5bdc9e6ac894f3122dabb4b01274e021beaf8bbaeffb13f22d986cb7217b46dae800d6e54d3f51071cabd478382330ade3107267dd7106ea0e4e5d4c5c9e3693b5404198dfa752a1dd8ea59a66a1e4c7c049476545ca2dd213849a", 0x63}, {&(0x7f0000000680)="72855609b543c7d02d9f87f949f0d523727251ecfab34ed47938cc5e7e3c1957b3ca4f256eb434feabd1783d073cab60a9059b72e19df57dde800017ce5c35187d8d5a39f7f77116ea9b9f2054ffa0f04c666edf7259d0eea75fbf403f70deb4bbf0bcecb1f1c182bce0d4669997d85967addc596f20e2b13bb8c634b22cfa52a604650ed1f42fc6417784d6287febea5876cc8f10989e233e426e90f09679f2b7d6f9f768f6c8770e688a1d9dfb945c1248a4b9fa5f6d853b74e73cd733e7ceb98369d99408032c21b9e4c7ecd90af66289e74ff0bf1a17c3503cc1a7b1ae2dacee2f90238baecd43c054044895d0fe2334971d4d4bfff70b4d1ae0afdf07f6f909b5ae3f5552619af3cae27d4b3ab04ee8b2529b816699e12957e651016e5d58f535140d9c1ec6f1c2592bec72e302b4549ef65d27518d596c11f941c99426f1bf0682bec8d3ca9e148b1ac07f4cdf35ab923ab13a4a46529280b7d0be381bfe9190ae4f3f417df6304f53bbc86fb99f2f7e2936b11a716c7ddcd24ce8d29688367c5796e107f4390c69cab0713829d6a1645c0f57da7f29890ca2eeccad6b2f5edcf10ce34527431eb4afadcf02d597b3182afd7d3a4b6e80ad5d05ad53efa45c4d4cd187bc6f2ec954ff3ed768060109e1825a5701ec20b059f01b8bcf6f4c2ce4774a01d295cc9fe724e82dc1028b199e9e4b26632331088d61eb447938ba7e11358716dff30a39f9ce90c254e717b7b941692e516654c88b37999ec7808b37e98837e8c1b8a0fdd52b5e89259f0b3b06a87bea0d25b10011b678491019966995e08e3dcea42e36fbb693a76a79edb1094de70492019db198261e8be4be648bb4477e780b78e6d98cc9a8a6e1aa8e507d8b629d14bab6c38ecd8fd41f2283ee55ecdd6aafc643e4bae40ef8497c9c23a85df58b5ee5753a233827e689b5b731db5b53816dc51ac8a960a18fbdf9d29e3d4e4adcd2ed87035ff3208b84bdc5539fca1bbf00f72c43e746f5de07ba9d81b5bd6cb338f728f4fd062b38290e0b6617b276891d4263a4868170067627e619bbf510e92510d83b2fd7ba612079d984100694149e728bbc252a5d7fa08c805f380b94f59b1b68f176d10178900e6b80904d496c5a731f388f7710a395290a7286d94851ff8409ddbf7cdc0db7d28d3acb29332ab851e50604594c4847334d2e87e32b8e35daf24916aa969a9e6382a26048a33a652cf467931571593c33a717dd4fc9e512eca23dbfddcb170339a0c4648b278063057d0fef7b3f72d7d47621e5b3132ff8093354ddfbaea31e3a3ba2a66725c855fcf90055e4b874c5be61496b8c959ec8bf589b807a1ed9abbb8b634c8d8d8b5ac81dd6561bbb8f4423ed437dd67c36306c750815332fc7758ff119d84c9e74a7720492bfae77646200b06fc3270a510947cc6f46754e1e72a585c30ac7d95511692e8cebdca7bc36b82cf2ae0e84cf5f0df239192bd8b16f45e8cdab09925165c9e5bcf1b4a8697e91184c03eaa54b587b237929ab03e013e255efead1db1ae7cc23f002a7aa9e0f42eb2bd91750974de9597268ef9ec68002b25f630ff90b824013eb18a76ceb82b51b3ce4c976f5a0b9f4809f2db439d9c76a909f15388a9db3ea77681e66f0b60f74a76cdf7534a614068ec668c44f8b6d3d0b0274f0e1d3273f2e0a71a3181d0cec45f08e6bb7c9f2ae9226736f9c332a4a1691ea05a116ae99e46428200084390c08eeae2aa146108caca3e6efdbb1c712422f5b412cfc735130ec242c784312b39976cdd7fc591cad28cae794001a19318bcb16a97816241075d0e8040b174544c31155a4ab42986c8e800b672c7afc0bccbccacd84c78b51da7f0f0ae06c0cc69e8b18bdcb498dbee2c21dedd1788af82fff7a74c38ebc20aafb9ab27907fafb11e4faba002bbf0852c8bd08cb17e8c7fc326d2bef0ad9a67e9dc56f3f530162eb6af8049526ea3289bc191ffdfaed36ab892e36d168c0f284f8afd14a62e43af16ae867380ea691a9f4452c1ec2434a40d0a00a2e868b1a0be813b00c83d99bc4ee2d0225bbc57055d9a10b427ca0af4d8d94c8d0e4be5a42a798ccacd0da4128655acf178db8eb59c12f3f243925fd7094152f8da7c3207c27e358c6af28e9f7f5438a393530c72f2c9ac84bb37fb459009c962df9531d020c825b5abf7c639d1860b571386fbf91f0efc2afc7a2a891509fe1fe74606fc3a93c9aac4f673f89a33900fdf13c93660dafd67f6f5d259fea298c653e4e1f7d913a824fd229fabb570acb7e0a5a2c671f49b8241e8dbd06d9be50cc695a4cf32f6f793f8344da750bb63d8bfcfc12c0aa7677de843bcf0df5fd4a695f0ba6233d65839e8f123a3a962f798f4c8b391c2ffb90e42cb8d324c246034f05319793509ee43b61ae6f235821375718dffe82fb86da310f3639ffd3e8398565ceb188fc458c8df798dc93170489698ad93ef96f5cd1a6733a6be03d9ee46dca782f54782820f533aecc69500a4ad5a2ae51e7e4ec33e434ed33ec6be5255e60745ed2a1cfb3e557a0c4a5e76c535f20a8e544767c1f8e840992f4871d01cb1fd15423b910ef46e8d3ab973f7b41270f010c13a999184b7462aa6fe5e465fd71436c808b3a27199123f79c6dc226e682eb76e964263a9c6803b5c5d20082e2a21bd0fc4f2355d06a6351cf5c7d699365d6e8ccfe979cf43b8f109740d83b04164dd692cfb456e3eb4ada5a25b2c993f61eee69412a37fc2887423ab40bf2084b6d3534b7e17497df28c9b81f7d462e0e0d845f505969fc2428aaa29184104131be5e9c486ac52d337121a3f8d87e606f97586ea21c42867b2e4366c24dd5f12a7d5d36a941a6348aae2bd5c9a5d7f2135b212399a447e2397eef9d095a38d061bdb939fa95f9b7bed0b222196e0be024d1ca3773ad11308506ee513ab03c381d7aeb8ddc4228ef69c531f84e56358f840a2b1653f934296ce64340ac6f08e9eb2f7d34f60260c7735e599fb2701e9b2d3873981b5385db98467cf73803ef1f399fee826cc080fa18cba1cd268771bb5161acc0ec11d31c7313f4a26f3e7bdef4d49992089843eb5b7b18b4d040d62c40aab4e441a533c64111e9c483b21707e1159b80a3c3790925224399448089fd6277d4557e6f0693259c2fa2767049b0885a00b3cfca99ec40ff9db558ce0f0c3e437e0813c0494a68027e16a14241dd6c16bb95d326bad298b569da953bdc227d64998d313925d2ec5ed3ee1bccf4dc24abef72c27ee0a891a9a147be41b251af6040b4c0d4c608edf7d0860b53f471afd65ac77dff3b09c8619a0555c31ac7115c745be9aee99c2ad4a66f9632c30007b35ea33e73ef68d8394f944af745ab983c1661212ae694b5a74ac585d7ce7e0f8c0a1468ce38dc7b5dec64638c6210c81ee365ff8c4f0404abc028eb2853918ca58566d1db58bbef1faa341db1668adf00e8422b20e3b74e05eafd98363e476fad2b401e69bfc5e938ad5686a99899f358ff00a6de60e20ddae8159ac7622c1833742378d34071f6776c8c20e003ae867127fe4a6bbfd47b5197de8e93d3265a15d64ebc69a33494425ca4c96ad637fb5a7ffdc00a23e25adaef1de58743288fb399506fa6d105fbb617f26b62fa03e9a80a40cc2c7a05d03c4b32cbce83e30f0dfd891f8601f97a0f9bc85e89b363090744fce3c086b6380cc75c532bb544446f921e9c8fe2744b55aa6f156d25d75c29d7f848865629e6c7d659ef82c7a768517611f61be1a56567ca633491b8f350dac47ec17affbde26aae2615a0c5808bb4abc0a8277bb8ca36a30e7f20b8d79cb8bbd8600605c5a2335f57a3269b51ba5c35df458be85715a8a59d6eb7d16c7fe2454693a345580c662fe65976c9d139e2da6cc126d879aeaea80e9d0c82b38ec5f360354bf0b384ea19dbca9bbef7831f0330978e571b4f9406671e64c013d10efa17f3f030e4457e07e056e171b74d97da22c03a1449059d74349d6f84a6a0630817c07639f7a12a598e63b512835eea5bda0b6518bb046ef2a300dbdac1278e15104969d06afcf9263c0b9f671f79c49d18239d921e6ba2e65d97304d33a8defdc457c262cfd31e43c63b094a4a824b9c9a77282ee7d2880f949ba1d47707a90637e6bd24cf9c35edd5b7280268c9aaa2417efc84c71f7d6f04e92f68d6ddff0f956f91c4a58d71a539414321c08bfb5cfa4b4f6fddfef2c8a94ee9d1338ed1be57092b209efe5f6d2b753d36e1f88af6ad15cb80c1b5f8cb9373bc8792f01d47daf8102bdc246ed79337f09d0f59132bc53c8d07e0d22f1f378c30269ef86b622e517b45a5203a929e9d5dac2fc0fc4e1981b2b61a1cf3d58e89ef7b640f4d988100211c2123eeb30ffc009b9dd9148781eb00e7306e0db7796e666399f485e8a645ca3a940d9b4c8037d30235d7fddcd27aec9d65ad589defa6e1d7637af9c15d224680ecf95bbfcce4db58dce6422f6c6b29c75e86ea11af29360d33f28d8c68c6f22dfe231dbadb621e85e384053225bde8b79ede37fd4b5f6a8c0b700ea7850104b2bcd3e6d9c32f9f74ad466f1eab2452060ffb37e0bba7661a7de963f4a480a17856a5d44bb72c15903a8405e2b572ebd18505c9c3a2bc2d3086bbbc09b8271489632b641fe034383d12469cdeef0273c8f612c77d56b4efc839c715ec8bcb4252a9143286c35d2782e0fb2e4aa7b939d25b4dc6d700566fc92c120643e2bcc60bc2814cda2f0553c0b446eab959a7d89bcbd0ccfd511b7eb42962cd75bccddcb46b1b88e981152d5de7b8f7b680349ce58a2913036be5f8e7d344d115d0c3abd1e3e3b539f4d0179924fb551b8297378f868a6e905d3b6982f840ef59efe2a5206889e07874643bb96b1d4e6797cedfad326d15c1bbb63de0ac729a157b8e8d52b397057408ebc78a06d00d26ca2394231e5eb94371f37dd21d8b4334766e8721d92e3ffe1cc5f1b09dc986fd6bcdae894bdeb468e759008c98e38b3cc87397ba6dbaf39f7acbbf96fa305dfd87b4abdba8e09a6809109d0f1a1255314d80c6195567b801be99d5af5335230f38db3a20509cdcdbd4ac2e5b10b1b98554d3d9d8d1babbf14c3d8c50c2b709b358ae3c87c0bb4ce04dec8ce5b1d28ec4b16ad3b5bf3aa7603441b98d0d3d8d92b249d4bc879b3abf75b23bcb56521b2507fb7a4206c5bcb2a1c89127a8cf93ea968279c5eed7b843c2e44b7ca87294d61ca4b458b3743d7d8c5dd6065b0dc77045f0cad58f764059e7dbc8d5adf106f4ad610974bbceb996f98fb872b7a94e6d90682cf2000c35f51ae9c22b04ff926b4911a4801d7a1e86284d4b5ab95fbab0a09f35e5a8c43fee2753d225a32b55eec35dfbadac68998fcb05dee4119d15b1f9b12a3599a5b73efee557ca0609d7e3ff8b6768af8fb95d98a8844a558a3001569f87d6158d4873a925b45399b629c890da5490c524e89407ea3c69df15946ff83fa45fdd9a7e5dae7a6e120c7ec0c1db6d37a0b224da2d1585299e2b4db07dc72533c9c787b7fe14230af3552229195df49c7ed0b921fd1c9d341bc7849dc3df41ced58fcc9cbc081092bd3aae1375a75d8d3c463ab1e84915a400c3932bee7ef53f802980718e990b1100682883833d21a435f0175fc16e1539af8ea5a786294a47939dcfd1257bf1778cb789be1e303b3910d6b5452ac53283e7275a1a150280a12a0a8b0b7cc191cf449aa8b9aa9345c09e6e883cb453630d3d43f193ecbda20b2d1bc22a544608e68a56acb2913f8703ddcd9e19", 0x1000}, {&(0x7f0000001680)="6f5d9b132fa20793ae85c769d22a51167ba1d699bfa66fddc16004548b65389bd6511c1fb494963f639f6f7a8dcfed0877d44c6b525de28ff91219d03af9286d106842697c47768748e0804d8de33eb29444b0807efdfe8d3f883180897597ead35d28793261f59815ed1aad95f6aa4bf844cd800af297b9199f904abee9f99460547444626b23e4e44ef8931bfed4d5fb55d25158dd5851aaffbad0e0a5d052991f3df6bb35cd12de2bd02bd6d573aae18f02a9cbae82a48c4d58598172ee0d191f5b4a7455", 0xc6}, {&(0x7f0000000440)}, {&(0x7f0000001780)="f9080e11af2c59bb3136b9b7d9559f480997d998972a516218fe9a5d1a4f14aee2248f1b38bb2f4ae6404ec617c6fcd45823e4ff7b9e33a51943f96c7a04ea029334aaecf2745c2d7e79b3ac14cb00e6effb789c703400914a5f46a4c269244443b3b80ac0797d710e77f191ed1007080a58d4cbec8871621c4b0e0cc492b8d10f38de7f3816711a4d7cd2ddf0f86f", 0x8f}, {&(0x7f00000004c0)="8cc2fdeacfe182d49d8564541679f3329a4b3e6c145142c33b4929da1102419ce0e7b4d85a61", 0x26}, {&(0x7f0000001840)="3c18f73a0fa86d6468a76cd334063ed85b849772d2c13183fe7426a382ce1f038b1b728671cef5c9da45ee426610192a6a", 0x31}], 0x8, &(0x7f0000001900)=[@mark={{0x14, 0x1, 0x24, 0x1000}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7e48}}], 0x90}, 0x4000800) semctl$SEM_INFO(r3, 0x1, 0x13, &(0x7f0000000500)=""/203) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000300)=""/91) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x102, "cc6ce1bdd7ccd937a0cc55b9bc925068cf289936a3a69235e6ddb30f215dcfad", 0x8, 0x0, 0xc6, 0x3, 0x0, 0x40000, 0x7, 0x0, [0xf1, 0x4, 0x2, 0x4b1]}) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r4, 0x0, 0x40d09) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/status\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x60, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x44800) 06:02:00 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:02:00 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275332c776f726b6469723d2e2f66696c65312c7570706572646972c8a55ba3c8ca1e6d"]) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000014c0)) 06:02:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc618000000000000"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:02:00 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x100000000000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:02:01 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0x0, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 533.023402][T19360] device bridge163 entered promiscuous mode [ 533.039261][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 533.039278][ T26] audit: type=1804 audit(1582005720.997:444): pid=19365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/361/bus" dev="sda1" ino=16525 res=1 [ 533.077689][T19366] overlayfs: unrecognized mount option "upperdirȥ[m" or missing value 06:02:01 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 533.125848][T19360] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 533.146174][T19366] overlayfs: unrecognized mount option "upperdirȥ[m" or missing value [ 533.157677][T19360] device bridge163 left promiscuous mode 06:02:01 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) personality(0x5000002) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000300)) 06:02:01 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0x0, @pix={0x600, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 533.342427][ T26] audit: type=1804 audit(1582005721.297:445): pid=19379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/362/bus/file0" dev="overlay" ino=16568 res=1 06:02:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc618000000000000"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:02:01 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:02:01 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x200000000000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 533.499134][T19393] overlayfs: filesystem on './file0' not supported as upperdir [ 533.606479][T19398] device bridge164 entered promiscuous mode [ 533.664001][T19398] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 533.751005][T19398] device bridge164 left promiscuous mode [ 533.767344][ T26] audit: type=1804 audit(1582005721.727:446): pid=19407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/363/bus/file0" dev="overlay" ino=16516 res=1 06:02:01 executing program 2: mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x10000, 0x16) fanotify_mark(r0, 0xbcdb1402b4d406b3, 0x40001000, r1, &(0x7f0000000100)='./bus\x00') truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r2, 0x0, 0x40d09) 06:02:01 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) 06:02:01 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) getsockname$l2tp(r2, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000540)=0x8, 0x4) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) open(&(0x7f0000000580)='./bus\x00', 0x200040, 0x20) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0x64, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x401}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x24000045) chdir(&(0x7f00000002c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0xfffffe3e) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) utimensat(r6, &(0x7f0000000380)='./file0\x00', &(0x7f00000005c0)={{0x77359400}, {r7, r8/1000+30000}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000400)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r9, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$PPPIOCGFLAGS(r9, 0x8004745a, &(0x7f00000000c0)) 06:02:01 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:02:01 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x300000000000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:02:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc618000000000000000000"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:02:02 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 534.066224][ T26] audit: type=1804 audit(1582005722.027:447): pid=19422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/362/bus" dev="sda1" ino=16597 res=1 06:02:02 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 534.193879][T19427] device bridge165 entered promiscuous mode [ 534.237632][T19433] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:02:02 executing program 2: mkdir(0x0, 0x0) chdir(0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x48000) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r4, r5, 0x0, r5, 0x0, 0xb}, 0x0, 0xffc, 0x3, 0x0, 0x0, 0x0, 0x81}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x2, 0x4e20, 0xffff, 0x4e21, 0xfff8, 0x8, 0x20, 0x20, 0x5e, r2, r4}, {0x2, 0xb2d, 0x7, 0x81, 0x7, 0x1, 0x9, 0x901}, {0x80000001, 0x3, 0x2, 0x40}, 0x1b, 0x6e6bb0, 0x0, 0x0, 0x1, 0x3}, {{@in6=@loopback, 0x4d2, 0x3c}, 0x2, @in6=@remote, 0x34ff, 0x0, 0x3, 0x10, 0x6, 0x9, 0x2}}, 0xe8) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r7 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, r7, 0x0, 0x40d09) 06:02:02 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 534.270126][ T26] audit: type=1804 audit(1582005722.227:448): pid=19436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/362/bus" dev="sda1" ino=16597 res=1 [ 534.308821][T19433] device bridge165 left promiscuous mode [ 534.375571][ T26] audit: type=1804 audit(1582005722.337:449): pid=19439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/364/bus/file0" dev="overlay" ino=16525 res=1 06:02:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc618000000000000000000"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:02:02 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x400000000000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 534.519404][ T26] audit: type=1804 audit(1582005722.477:450): pid=19456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir007810815/syzkaller.BCc2i5/363/bus" dev="sda1" ino=16694 res=1 06:02:02 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:02:02 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 534.720794][T19461] device bridge166 entered promiscuous mode [ 534.755531][T19461] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 06:02:02 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xd) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000001c0)) 06:02:02 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 534.807354][T19461] device bridge166 left promiscuous mode 06:02:02 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 534.917419][ T26] audit: type=1804 audit(1582005722.867:451): pid=19469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771450061/syzkaller.UoyrJU/365/bus/file0" dev="overlay" ino=16561 res=1 06:02:02 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:02:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc618000000000000000000"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 535.069520][ T26] audit: type=1804 audit(1582005722.937:452): pid=19474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir991788372/syzkaller.xRAgmo/359/file0" dev="sda1" ino=16539 res=1 06:02:03 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x500000000000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 535.236437][ T26] audit: type=1804 audit(1582005723.197:453): pid=19490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir991788372/syzkaller.xRAgmo/360/file0" dev="sda1" ino=16549 res=1 [ 535.256937][T19491] overlayfs: failed to resolve './file0': -2 06:02:03 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x600}}}) socket$vsock_stream(0x28, 0x1, 0x0) [ 535.283238][T19489] device bridge167 entered promiscuous mode 06:02:03 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 535.317341][T19493] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 535.343092][T19493] device bridge167 left promiscuous mode 06:02:03 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f776502006972c62e2f6275732c776f726b6469723d2e2f66696c65312c757070657264ca9b6c18e9a889bd61be04036069723d2e2f66696c65301a4f1998161db3aed26e5539801e363b5a66f5c414e07a89865adbb1dcf8cae459f0d731e527456894905b"]) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000014c0)) 06:02:03 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xd) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000001c0)) 06:02:03 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x600000000000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:02:03 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:02:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/168], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 535.767116][T19518] overlayfs: unrecognized mount option "lowe" or missing value 06:02:03 executing program 3: open(0x0, 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:02:03 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xd) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000001c0)) 06:02:03 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x30040, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000140)={0x9, 0x200, 0x3, 0xffffffff, 0xfff}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r1, &(0x7f00000014c0)) [ 535.938801][T19528] device bridge168 entered promiscuous mode [ 535.960927][T19528] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 536.019860][T19531] overlayfs: failed to resolve './file0': -2 [ 536.026169][T19528] device bridge168 left promiscuous mode 06:02:04 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x464001, 0x0) ioctl$TIOCSBRK(r0, 0x5427) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@sr0='/dev/sr0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x208000, &(0x7f0000000200)='overlay\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r1, &(0x7f00000014c0)) [ 536.103174][T19538] overlayfs: filesystem on './file0' not supported as upperdir 06:02:04 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x700000000000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:02:04 executing program 3: open(0x0, 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:02:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/168], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) [ 536.307508][T19551] devpts: called with bogus options 06:02:04 executing program 3: open(0x0, 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:02:04 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xd) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000001c0)) [ 536.448222][T19551] devpts: called with bogus options [ 536.476348][T19554] overlayfs: filesystem on './file0' not supported as upperdir 06:02:04 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312cfdca480921d075707065726469723d2e2f66696c65307c11fa384f58a34f1347d9131d69134bfbd982cb8475e21ebab6d7023347296d42b06b01"]) chdir(&(0x7f00000002c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000014c0)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x101200, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000001c0)={0x1, "7f960e01eb3385d5fe0be768edc62c23ef0b95b9dc629002bb29e0cf25ec8671", 0x4, 0x2, 0x4, 0x5, 0x4, 0x4, 0x33a, 0x4}) 06:02:04 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:02:04 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x800000000000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 536.668998][T19569] device bridge169 entered promiscuous mode [ 536.699068][T19569] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 536.746878][T19569] device bridge169 left promiscuous mode 06:02:04 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 536.841168][T19584] overlayfs: unrecognized mount option "H !upperdir=./file0|8OXOGiKق˄u3G)mBk" or missing value 06:02:04 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xd) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 06:02:04 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:02:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d665203775695ea0b39b103d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3c0100dd09000000603b8f3e24d021af02b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe381b3a6af09ab2c3559c439c6479605528726a068cdc76a22067b3534442da88bc90"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6, @ANYBLOB="c3f9b529ff962cf6c37e2b289b3a3f000000cff6bc379ddcdf5da799c07ed9b78b98bf94bedbf3369c410b0b3692cdd2abbe02058bd0b9c893790300fe78bf7b9787111d42aa28152284e3ad7ed1d41fe829bdbbb48ef94ea97eb6a749bd8d30dfa5083ef62d3692d17cfd537d0689b4152cb80f4e27a986b250a8526dda97cdfa6b2641e368acc79cd775eeeee2dd4f47c6736a4a26b63222ed0b8dc61800"/168], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) 06:02:05 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@dots='dots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3f00000000000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:02:05 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7000000, 0x0, 0x3e, 0x0, 0x0, [{}]}) 06:02:05 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file