[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 44.753081][ T27] audit: type=1800 audit(1554663889.341:25): pid=7778 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 44.780793][ T27] audit: type=1800 audit(1554663889.341:26): pid=7778 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 44.811768][ T27] audit: type=1800 audit(1554663889.341:27): pid=7778 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.63' (ECDSA) to the list of known hosts. 2019/04/07 19:05:09 fuzzer started 2019/04/07 19:05:12 dialing manager at 10.128.0.26:34543 2019/04/07 19:05:12 syscalls: 2408 2019/04/07 19:05:12 code coverage: enabled 2019/04/07 19:05:12 comparison tracing: enabled 2019/04/07 19:05:12 extra coverage: extra coverage is not supported by the kernel 2019/04/07 19:05:12 setuid sandbox: enabled 2019/04/07 19:05:12 namespace sandbox: enabled 2019/04/07 19:05:12 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/07 19:05:12 fault injection: enabled 2019/04/07 19:05:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/07 19:05:12 net packet injection: enabled 2019/04/07 19:05:12 net device setup: enabled 19:07:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a500), 0x400000000000259, 0x0, &(0x7f000000a780)={0x77359400}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) syzkaller login: [ 209.961055][ T7944] IPVS: ftp: loaded support on port[0] = 21 19:07:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") semctl$SETVAL(0x0, 0x0, 0x10, 0x0) [ 210.102429][ T7944] chnl_net:caif_netlink_parms(): no params data found [ 210.210247][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.217800][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.226022][ T7944] device bridge_slave_0 entered promiscuous mode [ 210.235349][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.242526][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.250896][ T7944] device bridge_slave_1 entered promiscuous mode [ 210.272403][ T7947] IPVS: ftp: loaded support on port[0] = 21 [ 210.285896][ T7944] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 210.298933][ T7944] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 210.344768][ T7944] team0: Port device team_slave_0 added [ 210.355547][ T7944] team0: Port device team_slave_1 added 19:07:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000000)=0x4) fcntl$setstatus(r0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) sendfile(r0, r1, 0x0, 0x80003) [ 210.450792][ T7944] device hsr_slave_0 entered promiscuous mode [ 210.498033][ T7944] device hsr_slave_1 entered promiscuous mode [ 210.549039][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.556341][ T7944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.564438][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.571632][ T7944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.594263][ T7950] IPVS: ftp: loaded support on port[0] = 21 19:07:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_buf(r1, 0x29, 0x22, &(0x7f00000000c0), 0x377) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x39) fcntl$setstatus(r2, 0x4, 0x42803) [ 210.686089][ T7947] chnl_net:caif_netlink_parms(): no params data found [ 210.798069][ T7947] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.805342][ T7947] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.841573][ T7947] device bridge_slave_0 entered promiscuous mode [ 210.871646][ T7947] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.889900][ T7947] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.900164][ T7947] device bridge_slave_1 entered promiscuous mode [ 210.934668][ T7954] IPVS: ftp: loaded support on port[0] = 21 [ 210.984183][ T7944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.008428][ T7947] bond0: Enslaving bond_slave_0 as an active interface with an up link 19:07:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) [ 211.041360][ T7944] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.064180][ T7948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.076776][ T7948] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.103798][ T7948] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.129928][ T7948] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 211.158977][ T7947] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 211.191395][ T7948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.208490][ T7948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.228069][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.235177][ T7948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.259986][ T7948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.280446][ T7948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.300039][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state 19:07:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) pkey_alloc(0x0, 0x0) flock(0xffffffffffffffff, 0x0) [ 211.307150][ T7948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.334172][ T7948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.359060][ T7948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.402649][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.413321][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.422855][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.434893][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.444734][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.449466][ T7959] IPVS: ftp: loaded support on port[0] = 21 [ 211.455736][ T7950] chnl_net:caif_netlink_parms(): no params data found [ 211.497495][ T7947] team0: Port device team_slave_0 added [ 211.516137][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.524987][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.533763][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.542254][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.551619][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.566204][ T7947] team0: Port device team_slave_1 added [ 211.634186][ T7944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.636536][ T7960] IPVS: ftp: loaded support on port[0] = 21 [ 211.680590][ T7947] device hsr_slave_0 entered promiscuous mode [ 211.718584][ T7947] device hsr_slave_1 entered promiscuous mode [ 211.776108][ T7950] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.783652][ T7950] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.791972][ T7950] device bridge_slave_0 entered promiscuous mode [ 211.840872][ T7950] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.848639][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.856786][ T7950] device bridge_slave_1 entered promiscuous mode [ 211.913311][ T7950] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 211.950408][ T7950] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 211.963284][ T7954] chnl_net:caif_netlink_parms(): no params data found [ 212.077541][ T7950] team0: Port device team_slave_0 added [ 212.107763][ C1] hrtimer: interrupt took 27082 ns [ 212.116089][ T7950] team0: Port device team_slave_1 added [ 212.128368][ T7960] chnl_net:caif_netlink_parms(): no params data found [ 212.139874][ T7959] chnl_net:caif_netlink_parms(): no params data found 19:07:36 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000001, 0x3) accept4(r0, 0x0, 0x0, 0x0) 19:07:36 executing program 0: syz_mount_image$jfs(&(0x7f0000000480)='jfs\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@discard='discard'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") [ 212.271109][ T7950] device hsr_slave_0 entered promiscuous mode [ 212.295081][ T7975] JFS: discard option not supported on device [ 212.308102][ T7950] device hsr_slave_1 entered promiscuous mode [ 212.346205][ T7954] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.365570][ T7954] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.373601][ T7954] device bridge_slave_0 entered promiscuous mode [ 212.402260][ T7960] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.410164][ T7960] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.418938][ T7960] device bridge_slave_0 entered promiscuous mode [ 212.425517][ T7975] JFS: discard option not supported on device [ 212.446402][ T7954] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.453930][ T7954] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.462235][ T7954] device bridge_slave_1 entered promiscuous mode [ 212.476075][ T7960] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.491091][ T7960] bridge0: port 2(bridge_slave_1) entered disabled state 19:07:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 212.501932][ T7960] device bridge_slave_1 entered promiscuous mode [ 212.577192][ T7959] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.598347][ T7959] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.611354][ T7959] device bridge_slave_0 entered promiscuous mode [ 212.628699][ T7960] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 212.644081][ T7960] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 212.662741][ T7954] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 212.673241][ T7954] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 212.688120][ T7959] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.695297][ T7959] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.703661][ T7959] device bridge_slave_1 entered promiscuous mode [ 212.724810][ T7987] XFS (loop0): Invalid superblock magic number [ 212.745672][ T7954] team0: Port device team_slave_0 added [ 212.754572][ T7954] team0: Port device team_slave_1 added [ 212.762443][ T7960] team0: Port device team_slave_0 added [ 212.774343][ T7947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.792373][ T7959] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 212.803785][ T7960] team0: Port device team_slave_1 added [ 212.840070][ T7959] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 212.865794][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.874109][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.885511][ T7947] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.930686][ T7954] device hsr_slave_0 entered promiscuous mode [ 212.988936][ T7954] device hsr_slave_1 entered promiscuous mode 19:07:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 213.131242][ T7960] device hsr_slave_0 entered promiscuous mode [ 213.179343][ T7960] device hsr_slave_1 entered promiscuous mode [ 213.229083][ T8000] XFS (loop0): Invalid superblock magic number [ 213.236972][ T7959] team0: Port device team_slave_0 added [ 213.245630][ T7959] team0: Port device team_slave_1 added [ 213.255097][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.263918][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.272474][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.279632][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.287426][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.296278][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.305086][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.312363][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.322353][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.401170][ T7959] device hsr_slave_0 entered promiscuous mode [ 213.448335][ T7959] device hsr_slave_1 entered promiscuous mode [ 213.521074][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.542309][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.571319][ T7950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.584210][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.593527][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.619392][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.627241][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.636123][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.644877][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.654006][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.683214][ T7947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.695474][ T7947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 19:07:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x0, 0x0, 0x0}) getrusage(0x0, 0x0) getpid() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 213.749374][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.758240][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.766994][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.776372][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.796136][ T7947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.812932][ T7950] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.858080][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.867227][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.884552][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.887032][ T8013] binder: 8012:8013 transaction failed 29189/-22, size 24-0 line 2995 [ 213.891774][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.921410][ T7954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.932549][ T8013] binder: 8012:8013 transaction failed 29189/-22, size 24-0 line 2995 [ 213.944168][ T7952] binder: undelivered TRANSACTION_ERROR: 29189 19:07:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000800)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40084503, 0x0) [ 213.967727][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.968136][ T7952] binder: undelivered TRANSACTION_ERROR: 29189 [ 213.979186][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.014539][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.025225][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.032375][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.040868][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.049722][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.058632][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.067241][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.086796][ T7950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.098276][ T7950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 19:07:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$bfs(&(0x7f0000002540)='bfs\x00', &(0x7f0000002580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 214.119214][ T7960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.132168][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.141439][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.158503][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 19:07:38 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x200, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0x0) [ 214.167129][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.175871][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.184540][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.193059][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.212748][ T7959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.224806][ T8027] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) [ 214.264803][ T7960] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.275435][ T7954] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.302102][ T8027] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) [ 214.310937][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.323892][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.343916][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.351841][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.359846][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.376058][ T7959] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.390334][ T7950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.418465][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.427573][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.437002][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.451546][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.478213][ T3073] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.485300][ T3073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.493039][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.501978][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.510515][ T3073] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.517629][ T3073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.526091][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.575994][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.585471][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.594582][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.605628][ T3073] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.612759][ T3073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.640110][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.649649][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.658462][ T3073] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.665521][ T3073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.673712][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.682631][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.684550][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.699668][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.748703][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.766807][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.786643][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.793780][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.802037][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.811140][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.821986][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.829108][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.849192][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.860780][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.882531][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.891258][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.900431][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.909184][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.917782][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.926153][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.961423][ T7960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.980081][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.992795][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.002227][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.015613][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.025385][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.040181][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.051793][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.063138][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.074793][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.086175][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.100990][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.112570][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.124352][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.135648][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.146890][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.164988][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.176532][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.187812][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.196349][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.211007][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.222071][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.236941][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.276608][ T7959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.303049][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.331382][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.354547][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.373779][ T7960] 8021q: adding VLAN 0 to HW filter on device batadv0 19:07:40 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x200, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0x0) [ 215.451562][ T7954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.472081][ T7959] 8021q: adding VLAN 0 to HW filter on device batadv0 19:07:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) epoll_create1(0x0) 19:07:43 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x200, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0x0) 19:07:43 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x0, @loopback}}}, 0x98) 19:07:43 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x200, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0x0) 19:07:43 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) socket$kcm(0xa, 0x2000001000000002, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = socket$kcm(0x10, 0x100000000000003, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x29, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000300)=r1, 0x4) perf_event_open$cgroup(&(0x7f0000000400)={0x0, 0x70, 0x4, 0x0, 0x9c, 0x3ff, 0x0, 0x8, 0x2020, 0x2, 0x0, 0xffff, 0x0, 0x0, 0x651, 0x7d03, 0x8, 0x0, 0x0, 0x9d, 0xfffffffffffffffc, 0xb57b, 0x6329, 0x0, 0x0, 0x100, 0xfff, 0x6, 0xfffffffffffffff9, 0x1, 0x4, 0xade, 0x5, 0x0, 0x0, 0x3, 0x9, 0x3, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x4, 0x1, 0xf6ab}, r0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) 19:07:43 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) [ 218.721235][ T8081] check_preemption_disabled: 3 callbacks suppressed [ 218.721259][ T8081] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/8081 [ 218.738052][ T8081] caller is sk_mc_loop+0x1d/0x210 [ 218.743410][ T8081] CPU: 1 PID: 8081 Comm: syz-executor.4 Not tainted 5.1.0-rc3-next-20190405 #19 [ 218.752922][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.763470][ T8081] Call Trace: [ 218.763533][ T8081] dump_stack+0x172/0x1f0 [ 218.763586][ T8081] __this_cpu_preempt_check+0x246/0x270 [ 218.763609][ T8081] sk_mc_loop+0x1d/0x210 [ 218.781421][ T8081] ip_mc_output+0x2ef/0xf70 [ 218.786162][ T8081] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 218.791561][ T8081] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 218.798081][ T8081] ? prandom_u32_state+0x13/0x180 [ 218.803260][ T8081] ? ip_append_data.part.0+0x170/0x170 [ 218.808773][ T8081] ? __ip_make_skb+0xf15/0x1820 [ 218.813838][ T8081] ip_local_out+0xc4/0x1b0 [ 218.818376][ T8081] ip_send_skb+0x42/0xf0 [ 218.822648][ T8081] udp_send_skb.isra.0+0x6b2/0x1180 [ 218.827891][ T8081] udp_push_pending_frames+0x5c/0xf0 [ 218.833825][ T8081] udp_sendmsg+0x12ff/0x2820 [ 218.839345][ T8081] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 218.846176][ T8081] ? ip_reply_glue_bits+0xc0/0xc0 [ 218.854725][ T8081] ? udp4_lib_lookup_skb+0x440/0x440 [ 218.860412][ T8081] ? preempt_schedule+0x4b/0x60 [ 218.865300][ T8081] ? preempt_schedule_common+0x4f/0xe0 [ 218.870906][ T8081] ? ___might_sleep+0x163/0x280 [ 218.875808][ T8081] ? __might_sleep+0x95/0x190 [ 218.880535][ T8081] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 218.886367][ T8081] ? aa_sk_perm+0x288/0x880 [ 218.896919][ T8081] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 218.902514][ T8081] inet_sendmsg+0x147/0x5e0 [ 218.907039][ T8081] ? udp4_lib_lookup_skb+0x440/0x440 [ 218.912354][ T8081] ? inet_sendmsg+0x147/0x5e0 [ 218.917056][ T8081] ? ipip_gro_receive+0x100/0x100 [ 218.922121][ T8081] sock_sendmsg+0xdd/0x130 [ 218.926580][ T8081] sock_write_iter+0x27c/0x3e0 [ 218.931474][ T8081] ? sock_sendmsg+0x130/0x130 [ 218.936276][ T8081] ? aa_path_link+0x460/0x460 [ 218.941003][ T8081] ? find_held_lock+0x35/0x130 [ 218.945801][ T8081] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 218.952078][ T8081] ? iov_iter_init+0xee/0x220 [ 218.956795][ T8081] new_sync_write+0x4c7/0x760 [ 218.961482][ T8081] ? default_llseek+0x2e0/0x2e0 [ 218.966351][ T8081] ? common_file_perm+0x238/0x720 19:07:43 executing program 1: keyctl$join(0x1, &(0x7f00000004c0)={'syz', 0x1}) 19:07:43 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='/\xda\x9b\x03\xc7\xe5\x8by', 0x0, 0x0) [ 218.971401][ T8081] ? __fget+0x381/0x550 [ 218.975571][ T8081] ? apparmor_file_permission+0x25/0x30 [ 218.981123][ T8081] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 218.987379][ T8081] ? security_file_permission+0x94/0x380 [ 218.993038][ T8081] __vfs_write+0xe4/0x110 [ 218.997380][ T8081] vfs_write+0x20c/0x580 [ 219.001636][ T8081] ksys_write+0xea/0x1f0 [ 219.005890][ T8081] ? __ia32_sys_read+0xb0/0xb0 [ 219.010681][ T8081] ? do_syscall_64+0x26/0x610 [ 219.015373][ T8081] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 19:07:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_TIOCINQ(r0, 0x8953, &(0x7f0000000040)) [ 219.021449][ T8081] ? do_syscall_64+0x26/0x610 [ 219.026148][ T8081] __x64_sys_write+0x73/0xb0 [ 219.030755][ T8081] do_syscall_64+0x103/0x610 [ 219.035359][ T8081] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 219.041259][ T8081] RIP: 0033:0x4582b9 [ 219.045169][ T8081] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:07:43 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000080000002, 0x0) open(0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 219.064785][ T8081] RSP: 002b:00007f5b88c99c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 219.073212][ T8081] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004582b9 [ 219.081651][ T8081] RDX: 000000000000fdef RSI: 0000000020000280 RDI: 0000000000000015 [ 219.089632][ T8081] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 219.098484][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5b88c9a6d4 [ 219.106465][ T8081] R13: 00000000004c7a90 R14: 00000000004ddb68 R15: 00000000ffffffff 19:07:43 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000340), &(0x7f0000000380)=0x4) 19:07:43 executing program 3: syz_open_dev$sndseq(0x0, 0x0, 0x100000000000001) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000000)=0x4) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x2183f, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x0, &(0x7f00000001c0)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [], {0x4, 0x2}, [{0x8, 0x7}], {0x10, 0x2}, {0x20, 0x7}}, 0x2c, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80003) 19:07:43 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 19:07:43 executing program 1: socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000fc0000)='./file1\x00', &(0x7f0000000080)=@random={'user.', '//.elinux\xff\xb4\x01\x01'}, &(0x7f0000fc0000)='//selinux\x00\x00\x01\x01', 0xfeff, 0x0) 19:07:44 executing program 4: rename(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000003c0)=""/186, 0xba) 19:07:44 executing program 0: r0 = memfd_create(0x0, 0x2) r1 = dup2(0xffffffffffffffff, r0) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0xb0, r4, 0xb08, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="7f84461bb8d376c8bec4502cae45dde7"}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffffc}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}]}, 0xb0}}, 0x10) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000000)) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x2183f, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) getgroups(0x1, &(0x7f00000001c0)=[0x0]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80003) 19:07:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x80080, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x200000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x2779}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@remote, @dev, @empty, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40000003}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x160) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000001c0)) r2 = syz_open_pts(r0, 0x0) read(r2, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) close(r2) 19:07:44 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00020027f0000010100000002000000e1ffffffac1414bb"], 0x1) 19:07:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) 19:07:44 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="b6aafdf6a2c83eb5831c660d8c923460b593a4c06b8ba4569709666e3ee7bf606b856a95415923614fda796cfadfd2f3d4b1de160676c1ffff59bcb6d1011df1adf25edbb4339c8b4e9ef8abbdb0e00a1f3535ae18785c4cafcbe089169c92a92bfbaefba9369027d314"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80785659, &(0x7f00000003c0)={0x0, @ctrl={0x0, 0x0, @value64}}) ftruncate(r0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0x2f, "f8bf9129408c3a5f2a4ae09aa757d4bcc9f458976ea89e1c0a060c51431006d2788b2357516155e3984ca23c3ad7d6"}, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000000c0)) [ 219.785749][ T8148] input: syz0 as /devices/virtual/input/input5 19:07:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000001, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x2}, 0xa) 19:07:44 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800100000003) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000100000000000000"], 0x1) [ 220.346356][ T8177] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 19:07:45 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003800)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000140)=@hci={0x1f, r1}, 0x67) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000000001000000000055ae887930467fae3d43ffa51f7209934fe0d3e52000f67ed8602d6d741fbc0e84946297e8f536a96450b1533ad7cc6f90959c54483f6d309fc122aeeeef15fc000000000000"], 0x1}}, 0x0) 19:07:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) 19:07:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:45 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003540)={'ip6tnl0\x00'}) 19:07:45 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x200, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:07:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0, 0x4002, &(0x7f00000016c0)={[{@uquota='uquota'}], [{@subj_type={'subj_type', 0x3d, 'bdev@trusted>\'vmnet0.wlan0vmnet0'}}, {@context={'context', 0x3d, 'sysadm_u'}}]}) [ 220.661970][ T8198] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 19:07:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000001, 0x3) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) 19:07:45 executing program 5: write$P9_RREAD(0xffffffffffffffff, 0x0, 0x94b33167050f6b10) sched_setaffinity(0x0, 0xffffffffffffff6b, &(0x7f0000000940)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0x1650) 19:07:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000001, 0x3) r2 = fcntl$dupfd(r1, 0x0, r1) connect$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x2}, 0xa) 19:07:45 executing program 0: mkdir(&(0x7f0000000040)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x8}, 0x0, 0x1000) 19:07:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:45 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x200, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 220.948654][ T8222] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 19:07:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0}}], 0x0, 0x0, 0x0}) 19:07:45 executing program 1: request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz'}, 0x0, 0xfffffffffffffffe) 19:07:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:45 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x2) pwrite64(r0, &(0x7f0000000240)="09d6d00e0c21bbb9377869b9ac83821142d14468d8745d9d990190ce6269139c852a707b3ecbad7c58ce98882a2b954d9c36e9f8b06931b5bcdf2cc908d6ad6765978539245306c587d84423e1dfc4d0d95131506e40f9dd53dad7ee8801d3dd13dc5ecdec56b81a0c96b98da4819c81a8d311405404349617c8ce2f5fd67b51d9b806087d5188fdaf6f9f734e7f1008edbc8f3211763a5bcf928b63350871e714927a178a631b4540c492c079a74ad6e949cde61f804f2471bc3ecae318184e61502c577a40db5a23c9a52620ba58230b444e48c5747d38c37edec0df7594e91f847b4e1f67f93d3aa840ed55c1e4697b8d17bf54a8c85a2ae7e002e18c36e978e669bed8d964e6da1ade1f851e5114cd0df19bf8e7dd78d22dfec7bc08da4758aae78b58dcea4bcde715d1a8919e7809d38f61a69c5286cc31975b337bdd0d313b7985e8a6b3ce641ff1985a52e76c0565025db5d111d82367c6521790592326aa8a77f89e782ba8839c197d18bbd35168df9865e59df4d1dd8e0c8113393b6fceabb01171c7c629b942aeaf4d8d87d3315db9b43b2f4c599daf3617ea919ab13db54763bb08c49fc36711e7b8d21a8d2e6131eaf40202395251bc615195e0946ded620ca27747f23083e9e0c7f4982c55812dd59dbb0d184d762cd9a27f1403950e403fed3488f7844f24fa88343e4fcc4aea20e8894864e2db2c5eff9b7da24cd034ec04b32112d13ea06a5b55a872c2e084a236d17e53279c19133a447ab972ec768d746185367cdaac85189b0ea4a402e4a20c1a86f24fd6acdf664e87338fb5720e73e2156ac7eb8b4347e9f67b5cf6ac2397f79cdd08cb6c696a8af142d5740f7f718b48508d2073d599a19cf56a1363ec553c122c3952ff8390b440fdc1e41d641361f5c36966b9371761d57259c75b19422684a656834a855cb4f21f596b820dba01b7259dc09016dcbb6bebe38e23875c985c9f76b2ef13bb95e6f6ebfb4e87a30f0e99f2e0f53dfed33db3a5ad426641388e10c05fe2c05c19ce50335dfe7f5e9b6a7cb7c1c5abe9ab6cd092c71fb77948031b83e7852d6b7048d0cae4d54d3c2ec90cf7a255d3a8d684c67033f0b43b2924dd519c21b882a9b6f99f1a5bc47d90f447f94ebdd36c5d4fbf08bbb2ea0aac2503153dba211902ba9320f2224b9c49552f333d2c6dc4cfca154a4f0a1bd7ce0cfc4acacd18793061dde41bce85877ed1b7bc28518bbb7f58fe33706cf65ce95d764f55dc7cb0e1f946dcf56b40d6a109f9420afa902108bd148d228ab9b6992e265bc59a3415259211ecdeaf01cc118ba497eedd9c6dc8ba5721b720531e93251eecf0d7206f00e115765a86c2008741df3b903007ce8ee64ed58461332497e0ec27ff6209773a420b5e55beb32e076248526f0f304de4edffaeec113aaeaaf4072ceed9b03d835daa85da2adbc03ee7c78294cf3dff86fd7732fcceca4f3f671c5eb404a668896af2b4d240922b821b55603b7de9ad1bd50c7acdeff87f8ba842bd25275f538061e5cd48fa9f1e93a4aa523a374355575187dd0b120ad4e4ae370b609b2c08417217e57e3b0fcef8e1de3aeb34286d21a324be69bd045606d1f953d53c8ccf3639caebaafde158e220da50fbdaf517bf869e49c098775a5d9359d0eeea60dea83c4dc9ff31fe9ccb04f512e608e11e0ca0ef07980146f869ee946f045848275e0b90cb313691de66e3b23f5fc670c20cf54b29d946dcfe12b47a323a13c0bc0f8ca832f3e875951a5b4953e036796a4dac9bd2b96f01dab2adb9cb9df46be54003476b30facc3c66d092c8bc04b56ba86f4039a96187731cde5d7972a78ad3e57ce972808471d95ed85afc54f10379a53c109ff63981cbba93dbb543fbda027b6c0869794c4d93ea08600382d1110bbf51f4aced0074e822ae2792d767a3b39e281c6bb3584f389ef0a6da603344028d08e24ad6337638f3d6327b5ca3b7d2241b423f1a2d3b944b4dca4711a9a8e91ff541869d95088d7de636170b1df4f7d152a6906b0c35c1af8cc796fc5cae30a8bd869cd41b09cca9c84ec0e0fe811280ea850ad51e89c4c920abbcc18f13c77f5d3e013827937b3cdd33081bdc7752bc53d14194191d7d080bf7852ccb34c979231acbbdad9f0ec341b60fed154c9ffd5e997a82bb3c13655744a8a93a61349f9825ff8c83185f6184bc829fdd74b54cbee59bc06c620fb5fc19eda97a7619b934526dd4b4a809b94a00595f5d693dbcb19b665ea967892e03e54ac47348bff07b1af57bb4fbf888f1344edd320e95686ad7ced7c9c0b3cfe931bc61156629b1155a183a7da88ea0bb4f5ade079ccd6d7fbcb58a695ff95348366ef84551d3a83095102f12acc63d8d0bf06f71fc294b04c38a813db39b322839704f4e734b495930b2a375e11970e69727322964f0a2c0a305d8e4e902ad88023af5086ca3b5a4a8eec8d9748f96c37480f84d5f4a004a48e9ff1980769c162d2ee211f336d85a9c92d90c747a1161dbe66f8da9dc05c6ed1afdbb496b13b9549c17ce34583fed65327bc8b3a501f9c64901f161c03f2f6356351e627f4314c31c4910a080ab97e7bfe29c6b74c42f2e54006a3685a662674655494ac364039de090d8c8b6ea588454d560831a37e8cf833f305889c238e64aef48f061c81ab9f152929db705a8a481305f3cdd912d63a464ece84ca59b88db9cac560767fab8a34ce181420a7e1fb3ee0c341a8c2ffd7a69d248cc3fb19a0f5c7da697cf9d918dc1807cbc7b40b1b18bf625d6495aba11d7f202127466c4e30af3ae7f0a16c1f85b762bf2f9850a7a384e1cdcd8e0035fddaddb91bef8e4c21b046ec0dc610a852aa1367f3f42d0e67e07a7fe5cd22e394cd609c5897feb089e0fcd2407d8f8d8421ebe529a8c63c2350688f333627a349b99e1b442c5f73b50058d7dc5adb687d915b9e01e7e319c7ec99a9e5c761cdff8c0625cd37cd87bd9ff1a7480bbb45b1f3534b0a9c02d24f3f5580d041b138bf6dc77c61484d206101173e9717c9078bda064f821e83772cd08a752e6859d59cec648ea75eb4464ee936ef1d9ab1a0d1fda05a280f8085d9045b6105267541701b51f3df4a5e47d5d5696631d7279c2eeb292384859a616c358752e8803ec6fc0cf15e527530f887a4ba9f4bf7b161b263e1bb328cf7ffe61b3824e3a59709f00f7449971b53a95e3984870240f4efba42e8083c2540813d5c8cbab4ee85179f626cb828303cc522332a2d92695437d87bf22531eb9318f7e7f283d0b9f002a01a70f60123e913ba61e08357b369c6f3d083d9659ebb3bf14c5942340392daed4385fb92b666730b5fe3f36b48aa5fff1ebf73bb7700eb2884e7a2cd65ca124e8c911397796da2ae03d", 0x964, 0x0) [ 221.140670][ T8245] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 221.150858][ T8247] binder: 8239:8247 transaction failed 29189/-22, size 0-0 line 2995 19:07:45 executing program 1: r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r1 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) ftruncate(r1, 0x8007ffc) sendfile(r0, r1, 0x0, 0x400008bca) 19:07:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfbffffff, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:45 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={0x0}}, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80785659, &(0x7f00000003c0)={0x0, @ctrl={0x0, 0x0, @value64}}) ftruncate(r0, 0x4) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) epoll_create1(0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, 0x0, 0x0) [ 221.186814][ T8249] binder: 8239:8249 transaction failed 29189/-22, size 0-0 line 2995 19:07:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) [ 221.259658][ T7952] binder: undelivered TRANSACTION_ERROR: 29189 [ 221.277851][ T7952] binder: undelivered TRANSACTION_ERROR: 29189 19:07:45 executing program 0: 19:07:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:46 executing program 1: 19:07:46 executing program 2: 19:07:46 executing program 4: 19:07:46 executing program 0: 19:07:46 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)) 19:07:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:46 executing program 4: 19:07:46 executing program 2: 19:07:46 executing program 0: 19:07:46 executing program 1: 19:07:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfbffffff, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:46 executing program 4: 19:07:46 executing program 4: 19:07:46 executing program 1: 19:07:46 executing program 2: 19:07:46 executing program 0: 19:07:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:47 executing program 1: 19:07:47 executing program 0: 19:07:47 executing program 2: 19:07:47 executing program 4: 19:07:47 executing program 1: 19:07:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfbffffff, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:07:47 executing program 4: 19:07:47 executing program 2: 19:07:47 executing program 0: 19:07:47 executing program 1: 19:07:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:47 executing program 0: 19:07:47 executing program 4: 19:07:47 executing program 1: 19:07:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:47 executing program 2: 19:07:47 executing program 0: 19:07:48 executing program 5: 19:07:48 executing program 1: 19:07:48 executing program 4: 19:07:48 executing program 2: 19:07:48 executing program 0: 19:07:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:48 executing program 1: 19:07:48 executing program 2: 19:07:48 executing program 4: 19:07:48 executing program 5: 19:07:48 executing program 0: 19:07:48 executing program 1: 19:07:48 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:48 executing program 4: 19:07:48 executing program 2: 19:07:48 executing program 5: 19:07:48 executing program 1: 19:07:48 executing program 4: [ 223.814578][ T8381] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 19:07:48 executing program 0: 19:07:48 executing program 2: 19:07:48 executing program 5: 19:07:48 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:48 executing program 4: 19:07:48 executing program 1: 19:07:48 executing program 5: 19:07:48 executing program 2: 19:07:48 executing program 0: [ 224.058146][ T8400] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 19:07:48 executing program 4: 19:07:48 executing program 1: 19:07:48 executing program 5: 19:07:48 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:48 executing program 2: 19:07:48 executing program 1: 19:07:48 executing program 0: 19:07:48 executing program 4: 19:07:48 executing program 5: 19:07:49 executing program 2: 19:07:49 executing program 1: [ 224.394972][ T8421] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 19:07:49 executing program 4: 19:07:49 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:49 executing program 0: 19:07:49 executing program 2: 19:07:49 executing program 4: 19:07:49 executing program 5: [ 224.596831][ T8437] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 19:07:49 executing program 1: 19:07:49 executing program 0: 19:07:49 executing program 2: 19:07:49 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:49 executing program 4: 19:07:49 executing program 5: 19:07:49 executing program 1: 19:07:49 executing program 5: [ 224.818696][ T8456] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 19:07:49 executing program 0: 19:07:49 executing program 2: 19:07:49 executing program 4: 19:07:49 executing program 1: 19:07:49 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:49 executing program 5: 19:07:49 executing program 2: 19:07:49 executing program 4: 19:07:49 executing program 1: 19:07:49 executing program 0: [ 225.093865][ T8473] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 19:07:49 executing program 4: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 19:07:49 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x80000003f, 0x1, 0x4}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000240), 0x0}, 0x18) 19:07:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000040)}) 19:07:49 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000001, 0x3) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000001c0)) 19:07:49 executing program 0: 19:07:49 executing program 4: 19:07:50 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'gretap0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x21}}) 19:07:50 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'gretap0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0xe}}) 19:07:50 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x3, &(0x7f0000001a80)=0x39, 0xbe) [ 225.400259][ T8501] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 19:07:50 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:50 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'gretap0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0xa}}) 19:07:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x401, 0x8000) 19:07:50 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000140)=@hci, 0x67) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9f81db5b22c8b6c9"}}, 0x48}}, 0x0) [ 225.585094][ T8517] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 19:07:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 19:07:50 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:50 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000001a80)=0x39, 0xbe) 19:07:50 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) epoll_create1(0x80000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0xbe, "f8bf9129408c3a5f2a4ae09aa757d4bcc9f458976ea89e1c0a060c51431006d2788b2357516155e3984ca23c3ad7d65dcd96aa4870a067929aa6e38cb187e682b6b5ac3b457985043f012312a5f235cba564d9a095f651621f30fdb69da1f1d5ca443afb7c173337601810ffd73c8bb85c45db4fe3ab1ed8dd93dd438456d513206ae83f7df29ecc7e433f7e0441990076fa9b432cca9aab13047f245f293fb30c6f29dc8eabacbe2d830de05bfd028aa6e6d3028a2decca69df4b196641"}, 0x0) close(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)={0x11, @broadcast, 0x4e22, 0x4, 'dh\x00', 0x24, 0x90c8, 0x33}, 0x2c) 19:07:50 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000140)=@hci, 0x67) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9f81db5b22c8b6c9"}}, 0x48}}, 0x0) [ 225.771796][ T8533] binder: 8529:8533 transaction failed 29189/-22, size 24-8 line 2995 [ 225.795686][ T8537] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 19:07:50 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) pipe2$9p(0x0, 0x0) 19:07:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) [ 225.896565][ T8546] binder: 8529:8546 transaction failed 29189/-22, size 24-8 line 2995 19:07:50 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000140)=@hci, 0x67) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9f81db5b22c8b6c9"}}, 0x48}}, 0x0) 19:07:50 executing program 2: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) epoll_create1(0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0x46, "f8bf9129408c3a5f2a4ae09aa757d4bcc9f458976ea89e1c0a060c51431006d2788b2357516155e3984ca23c3ad7d65dcd96aa4870a067929aa6e38cb187e682b6b5ac3b4579"}, 0x0) [ 226.030783][ T8553] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 19:07:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) [ 226.332538][ T8565] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 19:07:50 executing program 4: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) pipe2$9p(0x0, 0x0) 19:07:50 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000140)=@hci, 0x67) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9f81db5b22c8b6c9"}}, 0x48}}, 0x0) 19:07:50 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) pipe2$9p(0x0, 0x0) 19:07:51 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'gretap0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x38}}) 19:07:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:51 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9f81db5b22c8b6c9"}}, 0x48}}, 0x0) [ 226.526230][ T8578] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 19:07:51 executing program 5: 19:07:51 executing program 1: 19:07:51 executing program 2: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) epoll_create1(0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0x46, "f8bf9129408c3a5f2a4ae09aa757d4bcc9f458976ea89e1c0a060c51431006d2788b2357516155e3984ca23c3ad7d65dcd96aa4870a067929aa6e38cb187e682b6b5ac3b4579"}, 0x0) 19:07:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:51 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9f81db5b22c8b6c9"}}, 0x48}}, 0x0) 19:07:51 executing program 1: 19:07:51 executing program 4: 19:07:51 executing program 5: 19:07:51 executing program 1: 19:07:51 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9f81db5b22c8b6c9"}}, 0x48}}, 0x0) 19:07:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:51 executing program 5: 19:07:51 executing program 4: 19:07:51 executing program 1: 19:07:51 executing program 2: 19:07:51 executing program 0: connect(0xffffffffffffffff, &(0x7f0000000140)=@hci, 0x67) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9f81db5b22c8b6c9"}}, 0x48}}, 0x0) 19:07:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:51 executing program 4: 19:07:51 executing program 5: 19:07:51 executing program 1: 19:07:51 executing program 0: connect(0xffffffffffffffff, &(0x7f0000000140)=@hci, 0x67) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9f81db5b22c8b6c9"}}, 0x48}}, 0x0) 19:07:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:51 executing program 2: 19:07:51 executing program 4: 19:07:52 executing program 2: 19:07:52 executing program 1: 19:07:52 executing program 5: 19:07:52 executing program 4: 19:07:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:52 executing program 0: connect(0xffffffffffffffff, &(0x7f0000000140)=@hci, 0x67) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9f81db5b22c8b6c9"}}, 0x48}}, 0x0) 19:07:52 executing program 1: 19:07:52 executing program 5: 19:07:52 executing program 4: 19:07:52 executing program 2: 19:07:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:52 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(0xffffffffffffffff, &(0x7f0000000140)=@hci, 0x67) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9f81db5b22c8b6c9"}}, 0x48}}, 0x0) 19:07:52 executing program 5: 19:07:52 executing program 4: 19:07:52 executing program 2: 19:07:52 executing program 1: 19:07:52 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(0xffffffffffffffff, &(0x7f0000000140)=@hci, 0x67) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9f81db5b22c8b6c9"}}, 0x48}}, 0x0) 19:07:52 executing program 5: 19:07:52 executing program 4: 19:07:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:52 executing program 2: 19:07:52 executing program 5: 19:07:52 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(0xffffffffffffffff, &(0x7f0000000140)=@hci, 0x67) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9f81db5b22c8b6c9"}}, 0x48}}, 0x0) 19:07:52 executing program 4: 19:07:52 executing program 1: 19:07:52 executing program 5: 19:07:52 executing program 1: 19:07:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:52 executing program 2: 19:07:52 executing program 4: 19:07:52 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9f81db5b22c8b6c9"}}, 0x48}}, 0x0) 19:07:52 executing program 1: 19:07:52 executing program 5: 19:07:52 executing program 2: 19:07:53 executing program 4: 19:07:53 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9f81db5b22c8b6c9"}}, 0x48}}, 0x0) 19:07:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:53 executing program 2: 19:07:53 executing program 1: 19:07:53 executing program 5: 19:07:53 executing program 2: 19:07:53 executing program 4: 19:07:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4, 0x7}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 19:07:53 executing program 1: 19:07:53 executing program 5: 19:07:53 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9f81db5b22c8b6c9"}}, 0x48}}, 0x0)