EATE_VM(r3, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x0, 0x101000}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x10000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ax25={{0x3, @null}, [@netrom, @null, @default, @null, @rose, @netrom, @rose, @bcast]}, &(0x7f00000000c0)=0x80) r6 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) ioctl$int_out(r6, 0x0, &(0x7f0000000080)) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000040)=0x14e) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x6000) 12:17:24 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x756, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) fstat(r2, &(0x7f0000000300)) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000040)={0xfffffff, 0x2, 0xc628, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9909e5, 0x6, [], @value64=0x7f}}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) close(r4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, r6, 0x1}}, 0x18) r7 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000480)={0x2, 0x0, 0x81, 0x5}, 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vcsu\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000440)={0xb, 0x10, 0xfa00, {&(0x7f0000000380), r6, 0x3f}}, 0x18) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20004005) 12:17:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f617564696f2300202f6421002f61754b696f2300202e252026282027277b20f6212b206f6f6d5f61646a000a29dac030481b45"], 0xf2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40080, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x9000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$netrom(r2, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) 12:17:24 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x757, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:24 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x6558}, 0x0) 12:17:24 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x4) 12:17:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/167) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x35bd8}, 0x0) 12:17:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, &(0x7f0000001140), 0x1000) [ 3234.942477] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3235.009771] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:25 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 12:17:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) pipe2(&(0x7f00000000c0), 0x800) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) connect$bt_sco(r2, &(0x7f0000000080)={0x1f, @fixed={[], 0x11}}, 0x62) rt_sigpending(&(0x7f0000000040), 0xfffffffffffffe9c) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:25 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x8100}, 0x0) 12:17:25 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x758, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:25 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000007a80)) 12:17:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x35bd9}, 0x0) 12:17:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) sched_yield() 12:17:25 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000007a80)) 12:17:25 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000007a80)) 12:17:25 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x759, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:25 executing program 1: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="5500000018007f7d00fe01b2a4a280930a600000fca84302910000003900090020000c0003", 0x25}], 0x1}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:17:25 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000007a80)) 12:17:25 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xf000}, 0x0) 12:17:25 executing program 2: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000007a80)) 12:17:25 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x75a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:25 executing program 2: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000007a80)) 12:17:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x35bda}, 0x0) 12:17:25 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xfe0f}, 0x0) 12:17:25 executing program 2: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000007a80)) 12:17:26 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x75b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:26 executing program 2: r0 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000007a80)) 12:17:26 executing program 2: r0 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000007a80)) [ 3236.346716] bond2386: making interface veth7949 the new active one [ 3236.375000] bond2386: Enslaving veth7949 as an active interface with an up link 12:17:26 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:17:26 executing program 2: r0 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000007a80)) 12:17:26 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x75c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:26 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xfeff}, 0x0) 12:17:26 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000007a80)) [ 3236.608472] bond2386: Enslaving veth7951 as a backup interface with an up link 12:17:26 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000007a80)) 12:17:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x35bdb}, 0x0) 12:17:26 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xff0f}, 0x0) 12:17:26 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x75d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:26 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:17:26 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000007a80)) 12:17:26 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 12:17:26 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x75e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:26 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 12:17:26 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 12:17:27 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x75f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 12:17:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="ca541d5c821c898b12c7fa1f1ca6bc561e83d8ee4b39854ab913f5a6fa0a65cf0c333dee7c59ba37c222584023b196d284ddf4d314b3d11794d86bd898f6c9884c65eed8f152964345514bb32cce8d9a4cddedf60fe640f73c12422b29adf0e6037459e4ed9fd08a095ab478011812169674bca5a1e5cb4e963f0248460c80dafd361761799ed32447c1bd5c7632f5fe0c23d34bef6c9937688f23c792b4e0cd3a68a569a7532695859935f383e3f7885db14db3964459a851d048cd666888189812b1aa2682d5cd9ee0cc7510fa7d8845070ca7ea57405e45dd15179c17dac63cbeba201a6aa1bd30f79a89040f67efe422b18b212a2dd6d67794de915d38558f228ec574e1a00dde23f6865aaef5bb8af28c357dc89013a13a88d4fe57755d8f077c6460ba20a71ab6743fb5890071021041209740cb9c764a303bf3ce07001e385cb1ce3a73a0f79d13beceb259d0", 0x150}], 0x2) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x3, 0x4) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='personality\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000080)=[0x8, 0x800], 0x2, 0x800, r5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1], 0x1, 0x0, r5, r0}) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000280)) r6 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r6, 0xc0285629, &(0x7f00000012c0)={0x0, 0x3, 0x1ff, [], &(0x7f0000001280)=0x8}) [ 3237.076067] bond2387: making interface veth7953 the new active one [ 3237.104994] bond2387: Enslaving veth7953 as an active interface with an up link 12:17:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x35bdc}, 0x0) 12:17:27 executing program 1: 12:17:27 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xfffe}, 0x0) 12:17:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340), 0x0) 12:17:27 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x760, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3237.304190] bond2387: Enslaving veth7955 as a backup interface with an up link 12:17:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000280)="ca541d5c821c898b12c7fa1f1ca6bc561e83d8ee4b39854ab913f5a6fa0a65cf0c333dee7c59ba37c222584023b196d284ddf4d314b3d11794d86bd898f6c9884c65eed8f152964345514bb32cce8d9a4cddedf60fe640f73c12422b29adf0e6037459e4ed9fd08a095ab478011812169674bca5a1e5cb4e963f0248460c80dafd361761799ed32447c1bd5c7632f5fe0c23d34bef6c9937688f23c792b4e0cd3a68a569a7532695859935f383e3f7885db14db3964459a851d048cd666888189812b1aa2682d5cd9ee0cc7510fa7d8845070ca7ea57405e45dd15179c17dac63cbeba201a6aa1bd30f79a89040f67efe422b18b212a2dd6d67794de915d38558f228ec574e1a00dde23f6865aaef5bb8af28c357dc89013a13a88d4fe57755d8f077c6460ba20a71ab6743fb5890071021041209740cb9c764a303bf3ce07001e385cb1ce3a73a0f79d13beceb259d0", 0x150}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='ipvlan1\x00') 12:17:27 executing program 1: 12:17:27 executing program 2: 12:17:27 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x34000}, 0x0) 12:17:27 executing program 1: 12:17:27 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x50, 0x1405, 0x100, 0x70bd26, 0x25dfdbfb, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) writev(r1, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000300)=0x8001, 0x4) 12:17:27 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x400300}, 0x0) [ 3238.004762] validate_nla: 7 callbacks suppressed [ 3238.004772] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3238.184933] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x35bdd}, 0x0) 12:17:28 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', 0x0, 0x0, 0x0) 12:17:28 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xf0ffff}, 0x0) 12:17:28 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x10, r1) 12:17:28 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x761, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3238.346762] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3238.370021] ptrace attach of "/root/syz-executor.2"[6664] was attempted by "/root/syz-executor.2"[6417] 12:17:28 executing program 2: 12:17:28 executing program 1: 12:17:28 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000080)={0xf, 0x4, {0x78, 0x40, 0x40, {0x40b5}, {0x401}, @ramp={0x6, 0x8, {0xfffc, 0x6, 0x7ff, 0x8}}}, {0x54, 0x2, 0x7, {0xb1f9, 0x7}, {0x200, 0x116d}, @period={0x5b, 0x1, 0x8, 0x37, 0x9, {0x800, 0x1000, 0x67e1, 0xfe}, 0x0, &(0x7f0000000040)}}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)={0x2}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="ca541d5c821c898b12c7fa1f1ca6bc561e83d8ee4b39854ab913f5a6fa0a65cf0c333dee7c59ba37c222584023b196d284ddf4d314b3d11794d86bd898f6c9884c65eed8f152964345514bb32cce8d9a4cddedf60fe640f73c12422b29adf0e6037459e4ed9fd08a095ab478011812169674bca5a1e5cb4e963f0248460c80dafd361761799ed32447c1bd5c7632f5fe0c23d34bef6c9937688f23c792b4e0cd3a68a569a7532695859935f383e3f7885db14db3964459a851d048cd666888189812b1aa2682d5cd9ee0cc7510fa7d8845070ca7ea57405e45dd15179c17dac63cbeba201a6aa1bd30f79a89040f67efe422b18b212a2dd6d67794de915d38558f228ec574e1a00dde23f6865aaef5bb8af28c357dc89013a13a88d4fe57755d8f077c6460ba20a71ab6743fb5890071021041209740cb9c764a303bf3ce07001e385cb1ce3a73a0f79d13beceb259d0", 0x150}], 0x2) 12:17:28 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x762, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:28 executing program 2: 12:17:28 executing program 1: [ 3238.686368] bond2389: making interface veth7959 the new active one [ 3238.694756] bond2389: Enslaving veth7959 as an active interface with an up link [ 3238.716714] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x35bde}, 0x0) 12:17:28 executing program 2: 12:17:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 12:17:28 executing program 1: 12:17:28 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x763, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:28 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x1000000}, 0x0) [ 3238.786339] bond2389: Enslaving veth7961 as a backup interface with an up link 12:17:28 executing program 2: 12:17:28 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x2, @pix={0x1ff, 0x9, 0x31424752, 0x0, 0x7, 0x1ff, 0x4, 0x4, 0x0, 0x4, 0x1, 0x7}}) writev(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="ca541d5c821c898b12c7fa1f1ca6bc561e83d8ee4b39854ab913f5a6fa0a65cf0c333dee7c59ba37c222584023b196d284ddf4d314b3d11794d86bd898f6c9884c65eed8f152964345514bb32cce8d9a4cddedf60fe640f73c12422b29adf0e6037459e4ed9fd08a095ab478011812169674bca5a1e5cb4e963f0248460c80dafd361761799ed32447c1bd5c7632f5fe0c23d34bef6c9937688f23c792b4e0cd3a68a569a7532695859935f383e3f7885db14db3964459a851d048cd666888189812b1aa2682d5cd9ee0cc7510fa7d8845070ca7ea57405e45dd15179c17dac63cbeba201a6aa1bd30f79a89040f67efe422b18b212a2dd6d67794de915d38558f228ec574e1a00dde23f6865aaef5bb8af28c357dc89013a13a88d4fe57755d8f077c6460ba20a71ab6743fb5890071021041209740cb9c764a303bf3ce07001e385cb1ce3a73a0f79d13beceb259d0", 0x150}], 0x2) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x2) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000002c0)=""/131) ioctl$mixer_OSS_ALSAEMULVER(r1, 0x80044df9, &(0x7f0000000280)) [ 3238.858668] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:28 executing program 2: 12:17:28 executing program 1: 12:17:28 executing program 1: 12:17:28 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x764, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3239.156865] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x801, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2000000}) fstat(r1, &(0x7f0000000640)) accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x8d8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000280)="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", 0x150}], 0x2) 12:17:29 executing program 2: 12:17:29 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x2000000}, 0x0) 12:17:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x35bdf}, 0x0) 12:17:29 executing program 1: 12:17:29 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x765, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:29 executing program 2: 12:17:29 executing program 1: 12:17:29 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x3000000}, 0x0) 12:17:29 executing program 2: 12:17:29 executing program 1: [ 3239.342906] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:29 executing program 1: [ 3239.544085] bond2390: making interface veth7963 the new active one [ 3239.552716] bond2390: Enslaving veth7963 as an active interface with an up link 12:17:29 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x766, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:29 executing program 2: 12:17:29 executing program 1: 12:17:29 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x4000000}, 0x0) 12:17:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x35be0}, 0x0) [ 3239.672558] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:29 executing program 1: [ 3239.774302] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:29 executing program 2: 12:17:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000040)={0x20, 0x4, 0x3f, 0xfffffffffffff9cc, 0x4, 0xffffffff94170777}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.events\x00', 0x0, 0x0) write(r2, &(0x7f00000002c0)="5c2fe78f29913da77450ffa8613e360b3d6f57aa994406b7de1deb8c439339fed640c6fd3a5f3d1c3dd7672a772d9ea972c6d2ac9f3912b0ca45defaa94489d39b72677307275c021a37929d714eb32df8ece8e2121380e03dcd4b3590b8ba818922ddeaa89db795cb077ecffe11bf5675e143cd36258b8b4904278273143f9c2b511d31c41c6fee7b0a28ee2adb40b754043433014f7f79410089b723000bf99c9511145cef95a8b330d3a43852bf2f7d9e716a4b4b9b29199a5131eb6956514e8f9425e6911252bd4c3014", 0xcc) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000003c0)={0x3, 0x10001, 0x3ff, 0xffffffff, 0x10, "60a2aeddb06f0864b749cb04f1babf98b95a2c"}) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x1000000000000064) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ubi_ctrl\x00', 0x20000, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@private1, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x81380003}) r5 = semget$private(0x0, 0x3, 0x0) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000180)=""/5) semctl$SEM_STAT(r5, 0xcabde468eaaa3a54, 0x12, &(0x7f0000000400)=""/186) fstat(0xffffffffffffffff, &(0x7f0000000500)) ioctl$FIOCLEX(r4, 0x5451) 12:17:29 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x767, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:29 executing program 1: 12:17:29 executing program 2: 12:17:29 executing program 1: 12:17:29 executing program 2: 12:17:30 executing program 1: 12:17:30 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x5000000}, 0x0) 12:17:30 executing program 2: [ 3240.064648] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x35be1}, 0x0) 12:17:30 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x768, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:30 executing program 1: 12:17:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cbf619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0be4fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="ca541d5c821c898b12c7fa1f1ca6bc561e83d8ee4b39854ab913f5a6fa0a65cf0c333dee7c59ba37c222584023b196d284ddf4d314b3d11794d86bd898f6c9884c65eed8f152964345514bb32cce8d9a4cddedf60fe640f73c12422b29adf0e6037459e4ed9fd08a095ab478011812169674bca5a1e5cb4e963f0248460c80dafd361761799ed32447c1bd5c7632f5fe0c23d34bef6c9937688f23c792b4e0cd3a68a569a7532695859935f383e3f7885db14db3964459a851d048cd666888189812b1aa2682d5cd9ee0cc7510fa7d8845070ca7ea57405e45dd15179c17dac63cbeba201a6aa1bd30f79a89040f67efe422b18b212a2dd6d67794de915d38558f228ec574e1a00dde23f6865aaef5bb8af28c357dc89013a13a88d4fe57755d8f077c6460ba20a71ab6743fb5890071021041209740cb9c764a303bf3ce07001e385cb1ce3a73a0f79d13beceb259d0", 0x150}], 0x2) 12:17:30 executing program 2: 12:17:30 executing program 1: 12:17:30 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x6000000}, 0x0) 12:17:30 executing program 2: 12:17:30 executing program 1: 12:17:30 executing program 3: r0 = socket(0x2c, 0x6, 0x3) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x1, 0x800, 0x8, 0x4}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x100000000000019a) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x200, 0x0) 12:17:30 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x769, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:30 executing program 2: 12:17:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x35be2}, 0x0) 12:17:30 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x80180, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) writev(r1, &(0x7f0000001340), 0x0) fcntl$dupfd(r4, 0x0, r2) 12:17:30 executing program 1: 12:17:30 executing program 2: 12:17:30 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x7000000}, 0x0) 12:17:30 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x76a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:30 executing program 1: 12:17:30 executing program 2: 12:17:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:30 executing program 1: 12:17:30 executing program 2: 12:17:30 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x76b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3240.982819] bond2391: making interface veth7969 the new active one [ 3240.991885] bond2391: Enslaving veth7969 as an active interface with an up link 12:17:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x35be3}, 0x0) 12:17:31 executing program 1: 12:17:31 executing program 2: 12:17:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="ca541d5c821c898b12c7fa1f1ca6bc561e83d8ee4b39854ab913f5a6fa0a65cf0c333dee7c59ba37c222584023b196d284ddf4d314b3d11794d86bd898f6c9884c65eed8f152964345514bb32cce8d9a4cddedf60fe640f73c12422b29adf0e6037459e4ed9fd08a095ab478011812169674bca5a1e5cb4e963f0248460c80dafd361761799ed32447c1bd5c7632f5fe0c23d34bef6c9937688f23c792b4e0cd3a68a569a7532695859935f383e3f7885db14db3964459a851d048cd666888189812b1aa2682d5cd9ee0cc7510fa7d8845070ca7ea57405e45dd15179c17dac63cbeba201a6aa1bd30f79a89040f67efe422b18b212a2dd6d67794de915d38558f228ec574e1a00dde23f6865aaef5bb8af28c357dc89013a13a88d4fe57755d8f077c6460ba20a71ab6743fb5890071021041209740cb9c764a303bf3ce07001e385cb1ce3a73a0f79d13beceb259d0", 0x150}], 0x2) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='U\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040028bd7000ffdbdf25190000001c000200a65e62cbc11346c3eb93e030eac58169021b467e96e1fc0f05001d000000000005001e0050000000"], 0x40}, 0x1, 0x0, 0x0, 0x50001}, 0x4000) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024000f05deffff3f07a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x38, 0x2, [@TCA_RSVP_ACT={0x34, 0x6, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0x10, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x9c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve0\x00'}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x2}}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_hsr\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1\x00'}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) 12:17:31 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x8000000}, 0x0) 12:17:31 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x76c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3241.071870] bond2391: Enslaving veth7971 as a backup interface with an up link 12:17:31 executing program 1: 12:17:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 12:17:31 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xa000000}, 0x0) 12:17:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [], [], [0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800]}, 0x45c) 12:17:31 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x76d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 3241.286632] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3241.357146] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:17:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x35be4}, 0x0) 12:17:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x53, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0xfffffffffffffe3b) creat(0x0, 0x30) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) fdatasync(r0) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 12:17:31 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x76e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:31 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xc000000}, 0x0) 12:17:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x100000400000003a) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[], 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0xf2) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000100)="b65fa1e95070e3bd4278aa4eab4788d1aa991bd8eb33f19fd67c6476415ceb95d3cdbc303d3cb263c996866e3b6de1e892587a50877de3b7afcefcd628b2d27cfa2c53fe7225bf006ab0ce8eae86974f8316e71ba16724c1dbcfdbe674ae46e7db81e6c99d3b84ecb4491ec93988aa7110ec2fc7fa4141c8bc98ac16b4ecb39263eacc6ce97e9a5743d75a4d713c46a6c83ca6982f728cc46d526e9c43d518ae728a49ae8eea2954f21d753e755e17e2ea08a25ccaed066e457373537e59fb551c10108e34f35c4e277662", 0xcb}, {&(0x7f0000000940)="c3275792c25e48c8b8cb3e3e129207b5a765ffaeaec24cd1c80287a5fc3551a6cb24e19f3b01f93542e17501ec9c4aed27bf725b21ece340a73ed828b732a58838a67a9f4dd32578531597960705cdfbec4779c64ddd1912da41f82f23f3a20ff08d2718632d6287e58d5e3cc568eb43c92c83616eaf546ffb26d9c8", 0x7c}, {&(0x7f0000000280)="69e5961a44b0840a9266882cb1dc58db7823ae8e4e2f3c9ad5d2de4030d705c32389bb14448689107db37405aa7562248aca05b8ae451868045bb44a8544cee6d3fc17fa29bbfd447a823dfa3b8a08eabd8586e90f6fb6d564b11e4d1404c9d77466755b03b981a2cd9843acc6d1", 0x6e}, {&(0x7f00000007c0)="88d44f91ff798c248707a55753403e60f77639df116b43d5628cdff315f707a2418e06a371aea2a45a5412c2219866fe1fcc9e818153a2119aef24a190bb476ba0e70a8bedede3f59c96d87d8f5b3445e6d36dfc4dabc9e0ef1c3d64", 0x5c}, {&(0x7f0000000840)="bd6c8125022403ea8dec39cd4380be8a93469c5f731d4ee14bc80beb6d9fd447e220e0f5a0a3106617e814888cda6b1e3097003dbf82bbaf1b16d1d286e32dd25184984e49b3ff50c0f208727d22bf161ef1cdfd3995b80d456eedb72b63c9a49aa0ee3256a0721ee34b70a543e628", 0x6f}], 0x5) 12:17:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) fcntl$dupfd(r2, 0x406, r0) 12:17:31 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @local, @val, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @empty}, @timestamp}}}}}, 0x3e) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 12:17:31 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xe000000}, 0x0) 12:17:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@int=0x3, 0x4) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) write(r0, &(0x7f0000000000)="34ba01b22c6744259cff0a6578c89152613c4c76c85495f195ec7a28363b52afe91162035a8fac8010f942dfb3be62a750fb8de4dc2f98cbcb94ae8bbbf867d5bb", 0x41) 12:17:31 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x76f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:31 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x4) 12:17:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x35be5}, 0x0) 12:17:32 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 12:17:32 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xf000000}, 0x0) 12:17:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000001140)="f43cae35", 0x4) 12:17:32 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r3}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r3, 0x3f}, 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="ca541d5c821c898b12c7fa1f1ca6bc561e83d8ee4b39854ab913f5a6fa0a65cf0c333dee7c59ba37c222584023b196d284ddf4d314b3d11794d86bd898f6c9884c65eed8f152964345514bb32cce8d9a4cddedf60fe640f73c12422b29adf0e6037459e4ed9fd08a095ab478011812169674bca5a1e5cb4e963f0248460c80dafd361761799ed32447c1bd5c7632f5fe0c23d34bef6c9937688f23c792b4e0cd3a68a569a7532695859935f383e3f7885db14db3964459a851d048cd666888189812b1aa2682d5cd9ee0cc7510fa7d8845070ca7ea57405e45dd15179c17dac63cbeba201a6aa1bd30f79a89040f67efe422b18b212a2dd6d67794de915d38558f228ec574e1a00dde23f6865aaef5bb8af28c357dc89013a13a88d4fe57755d8f077c6460ba20a71ab6743fb5890071021041209740cb9c764a303bf3ce07001e385cb1ce3a73a0f79d13beceb259d0", 0x150}], 0x2) 12:17:32 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x770, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x35be6}, 0x0) [ 3242.428712] sctp: [Deprecated]: syz-executor.3 (pid 7040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3242.428712] Use struct sctp_sack_info instead [ 3242.466857] sctp: [Deprecated]: syz-executor.3 (pid 7040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3242.466857] Use struct sctp_sack_info instead 12:17:32 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000040), 0x4) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:17:32 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x10000000}, 0x0) 12:17:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340), 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x12, 0x1, 0x5, 0x6b, 0x0, 0x3, 0x3, 0xffff, 0x1ff, 0x40, 0x12d, 0x5b, 0x0, 0x38, 0x2, 0x9, 0x6, 0x807a}, [{0x4, 0x7, 0x2, 0x8, 0xfffffffffffffffc, 0x10000, 0x1, 0x4}], "e262c58b296364ebcf9f48fff611c15c26b90a7b96c67f28f0a54b92cf7433021db2399104d8e0b7c45a220660bf5a34a7bb747fd461f5aafeeaca9097fd31047e534d50f44fdba8f2c615aaed702e3b32284bd3f716539a7eb2bf8044b1c9fcf53f53b21de9ff7cd21dd84d014fda766df7fbeae1b8d1c7577e766fe6bbdfd87825c6f4a87f60d23e3f221164c80707b653c1f3772a0485e6674a27a86a17e5e1dede615da48ca6f6a94eb5cb3c13365a76fec1447248bc859132b92bc284c3e5d8fb8323c887b988fa6502c84b"}, 0x146) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000000)) [ 3242.609708] sock: process `//selinux' is using obsolete setsockopt SO_BSDCOMPAT 12:17:32 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x771, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 12:17:32 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5, 0x4, 0x1}]}}}]}, 0x44}}, 0x0) 12:17:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pwritev(r0, &(0x7f0000001280)=[{&(0x7f0000000000)="d60c830275c6a487bd429708104520fc20feccd5b0c5bd196f7c85c4d9a40e22302414629930ef2a0d93382aa7540f248b04c44d62c329595f280d7df1a4fcc4f5a23749fd3092f5edf83a32a2efcfdf5b84dc7232b551efc03b8bebf5f676342a0e17ab6081d5705c700771169d0397d7909f77dcdb56cb8bf5119dbc9b8bbe97a9f96817d02cb64c1c9b2f51f9052f1ddcca8619e7cb3e0064118db4969a9be5facfcf64cea2157e136164d90d5c60b7d00d11ca329c4b252c94a083d6a3bade2b", 0xc2}, {&(0x7f0000000280)="dee70bac39c2ef56c23c64e0930f632ea4eb517ef7a966b11430c36520013dad92f0e5cc3a6cfdecaedb7206ea6a28865db5615126270c76d7081c408426d664f7c823a2db0d7cd4cc31629f03d03386bfe638a2fa2e1fa8993e79e67805fce49619f4be95c4ea7191055a8c18fb1e89ad9f1b286068d1857cd84b763af85e537d2671e3c7f010d391b73d1eb6bc189db0ff2f8494ecd588ec5af22814ab99410d128cfbae9a560808aeca6c48b69648b8fdb5ba1749659149a25351a573013d6704b92f77c4b0e5bb919c80f3cfb2739366f335750c407be3c879631ff97cc0aaeca31eb7286bb0baf65af51aa18b43e3a3040a28124b2f69a55992bb4e605f1a26eb27ce1e5bb52dc314e9195d0e8202d6fd5f47b775aed706ed2edc884fb7e0c2d451fac9c63fff167f9ddb8ef9399874a8b79392ea745b949751df628fee7b0534c12364672f883cd023483b7a97576ff22827c274c7fc749b7a84e4af11e71c8ac448f0d76d5d647a8d1cd27cfaa6da8c3d7b1b561c2bbcc7de4ffed31a0dd168a2e2e86236874524b1c25fdbcfaf142b5fa4d573f9e0548d4aa1b831df4138bc721c9dfd1ba8e87bf0f4e95b5efe278208817374fa172adeee81ab50c638e30a48f341f1baa06e2e5716f3d6c567c164e23df4b654e180873fb83ccce2068853eb70a7af304ac224fd40912c321199acdfaaa21e6127ef20680cc5010d1953ff75129a28e832017cea32332a3bb5e6b2e0386bdaf641ec5abde28275dfaeb92319fa77086fb30724caf962a236831fc23862887d5cda9bfb796dabf2c7dcadf2bc18f86bf7d0bc4c675ef12cc28bc72b6055c4e83dd2421bfc0a7f6a597e621b2bea1719370460552f8ae81353fc399a816eafa2ec9d21ca9b8f5a800feb8ba7c6a9780704f89dc3b149788431cf6f228ecaee5f3a3ea486a8d898c3d397d3b6076c21a93f2b43f3901ad43ef0c579dab6a03b45965922cff4f6f1cef277f2e617cd6be5050071b6f6e9a035fe65530b6bb0c4c76e93ece46850754654ecd8a42bd34dc7470c1f9e3dfbd1d97de2360de8d8452f9c8a3dea38a9d9d23a459d955b7900aa2610f15b691fa30db90bce0e16be772b728b8653215d347092406f1629a5e8509688de6d4e8d95f50846a2ef98263bf2eb382d6a43c476224c23273d7961cd3838523491151af9eed56be0b81acf6327d59d2a4e08b6bf5047e976eef97fb07a1501e62b355919016d2f7cc163e260c5f03ef28f31b8d9a0f416d18a954b35efa1021dbfa52a8893188393423b5994ec63988fefa314d8670037043146f3321de7770fc8cee4522f1b4289fbdec9e1e8a5b4c6be7875c9e6260c503e23a778a8a3fbd4b0ebc673eb74cd04306133238811c2c75006f4bdba43d0cdf6ed5313fb4fb3b79da6c82b44f668173849004647a89c99693ff62cb01bb59ea82985d561d884052ddf220538d062c7a617cfeefbc250eedfdd147069469d16160158b032cce0b9de6a1433fad754a451531d5b3d3117101d258b5a78fb919a8e5f3fd66b3cae5c2aabd4f0a933e6d006e71c7f2f6027739d9edb1c0707296a55cab5f84c5ad71914803be0fb062d9b5726645aa7bb025ca30eb7cff9b0275395bcdaebcf79f762bc88935a0f2413d809ed1ec992c93cfe972d501c5070c675505a34c58cbd1fe5f74e94409bf2c76265870bdb6fef2a920bd34e4facae7d5eb5e6f5e219ed0609f64861891de260a7d2acd2496446c5c5703f464782d7ff74cadada3a2781ae8579997e79ef8ab2f35cc0dcb34e39f33960753f8cfedcc91f1ea56aaa8672eb902a8414351d76948f554965cb6bbafb53f924d0f1f7b0c348df7382b4f3fb3307e5c97d4a6ecf99a981c7c51f1ec5b8c5222fdf5b87e6b0f8cf25a0e4a34951b54e19f765d75a319f8266a56f72f6799895d385a72aeed17b2b80e8c7a63f5183ddbd41e8d613d537811442e16ad7e02a3b72b5ab733b7543c4fc0fb4f130996fab31a4acd73f5216ebbbf7ccd707a662a580feb6a7334b51526abb5602e5fecd13b2263ff2bb517e901fbe5b9a29e86eeead0ee5888469b55be43885f171d656c865ec4fbddb2a3fc19746bbd258df963aaf21017d33b3eb3c1ee1c1eb6663846a9ac8da5f056b42b0246ec79ec0109e288d72e679268ee33950f2f99ac549bc0844c86fa74165c4fee78653503b39a908a04efa5c29c7d3b2fdc20d6e668fab3fc097bc65c4b4f4a912960bc5b5c2830dda87388d3f9d8f96d5dac06fd17c566cea5a2452f0fde841d06ce78c3fe3baf54446a8808df9dac9073b0748f6fca778b8d8be788db57792fa6ee489f62e3161f12dab2f7329ec38dac475ad4a90bf9450a5af82c7e0c797e1574ce60841b795368b1da869dae0762b9162098564d10d7a70a8e98d0352396eeaeab72a589b6befce2e461b25a64946180ab67143fcef298e09ebb61fc0dcbf3fdf41f3cd7a657f34e600e42fbffb9b831635caba9b1ece0a3125910bbdd95ae8738b2764fbb1bbb6184a257bbb9ce4e9fa84bda507edbcce0dd84188f46b442c62e9c558558f5694741d259f1aabf4caa04056452ff16a2a6bddbdd1997f85462654332bffeb86081a9365387fce844dbd8c743b3c1d8c5477c24032fa50738828fa620bddcbab7659001b101c8dac7af25a78cf0e3f097a631e151d4f232ed2a6c1434af6cc48a9d06e3cd595eb15af62dfbcfe14fbde3b9c7bc81caab3fef9e23a6610b3ee74ac2d9532c0afec37c5fa9637bd8fd18c9c6277da085c461c9a0459821efaa493229b96bb092fd22135902a08ae3658acd8a4411c52a7bb8b2782e2979c7e6ea4d5014560fae3bdeb743010da6278ab092c0c2652fb1a7bf2685a1edb2c601b1d84b16471e25d2894b1ea5989f578add8fba9d39ba40cdb5b4083246d2c94b5fba2569142f6e4d8a3ca1dd4bf1b20ba7ca65150476461b2f1b09df81fec7fdf136ba79e91a80db86147328db8b89699b360681ffea7e9a33c4beb7e9d1363c98f72ce9d51236b4a436c22ee441e1321941a1e9b66e00f0314ffca2e9322d8af8d04d68de5e8d04ce53b410c51ef89b764040f9423307fa781217418a2400cef8216c9db1858b37f8dbf69b4b7bc7c9d4998fe1e921b0280581f523a79f2b3d317341cf071b4d1648123e2fa552a96b27d519b284c339c294105be87593a0f28865807186a088a818001d5cd735631cf145358c9252891c415385a385192f8af3626d475003372460d5571e083ac3adb8cc56e3f68c31bcc127e6915b12560677b0641c4f942ed52f365f6f5676a1bbd43058d0db102d2a318830b11a23a80a0ef62a6357f0760fc3508e567b2bb0b4ee9449139aa4e8168a0d5d359f2b3695250cbab8e9bba44cd8d37d0a924a50020979d4b0f26458fb076a656e7479aae6ab60838433b808b03ceb43f2173c31443d9f8e1935e7f6855930c8f753850da0fbf7e9874cda2ff03f43fade953de5e9843f9d9090d13a92608b6b9cbbf94882714a2991a2faea8aefa4b79ca0a8731bc4d7b53320dc0d8ff3728e526444bf6df5c4dc0d7fee11eb2d9a3e57b856d35ee6422d3d03515bc897b633b3bdd2644a57b42e98a8ad514c98a10ce92f6e063844b999eae7e5d798ee111aef4fe7d51cdfe285c294897963d01a3a971c3e87e0d3f20485e16a0fe797976488d91e5d8c093444bee0794c0be184893e6731be58accfb89f9319a8353649026c19313d629d29ba9031c0876161a8b2e5c4f6b60414df99f4732a7969f0d115b3dd5b85afbc2ee2f8d060a1e327a947a160368542a1007587fa79c337db46bad5f0ef3a227ae8197723c6c37ca9dc599472dcfe98e70279d961cb6463b4ee0be4bfcb7a8ee0b11972b2d795dec932ba5feead3b61c42323efffa3eb2bcaec4790dece336bec02408391bdd0cbe3b78353615ce025ae46be2e3087d89a0d34ebc87bc925cb8052dfeec28e8954a48e417f3f859c38d3e79617ba68c556de8dc4a4884aab47ab9688910634fc1fbb2c30c041e9530cf1e9950a85ce5c1d743c02a02acd21004664739b267a1227e7a4e43bbe3c3b4ed14eb0e70169859d5f67381e5786bca1bb0a070892ca3e091a9d570aa6ecdef63ef41da11c638d5899583a0e082afd2dc488fbd998a1ff98a050306c2a7f1769d0150fce090d9ad36b586a51c508308448db73dd8870799698599d3601a19418c6c40ba42c1bed5d8a0701f8cfb9621395a1cb538516183d3731e89e2f0fdd73f8b5721bd70bc2ad493e913ec98993d6c257a75797f86428171ede6ecd0002610b7a2b866b983329fcacbed6e86f0dec1d97ce0af8507807ddf81370f661b2ba0b2de360bffd20e9d0002b0d7878181d830d794902a4e3b50b862a754cfb56602f50d9a96d03b4ff92497ea504f15748c1dde714f8a7a979a7b293cb070e1c1742739176ec8232a9de2b68a21e127683030fd7698462a61e4e5c50578c6dcf016b54f4feee6a631c1a257c96f27c09bed8b4b6a22a85c76d62c3ef563c800bd12fd90edd439889872004d9198a880b109e24c3e03755097c67e496c1937360dd43f16b06e720a5bfdf9ac5b6673f14314271543d64b38d4ef63cecd6ef75bd86f33f964e7dfe70191e5ce5c5e9a4af99a2ebae527c78eeea5680d001655edc34e747efa1d15b304f6ed1e4df4df7228d5914f15f5d2f04ed06464131a3d707e4ee97613fd66cc43ce5d9dcd34c60e0936b2490963855dbfa2c8a6009aaa3e9ec30b6ed68fcfdd0be9143170933806742727fe46b573ddfa8b7159ceff1f527058f7ffc279cc131a6be837b1f942cd9ac6a1252540565d6d7381f9a9827aa5b5a7aa91791c259c984ac02f0d89227b57aa7f3e5fb23ea8a2e485af5ce805578fba86dcf4c6086933b9975741a136d805235a364354765c0713c04408745b5d6ec6f4f0bd549cce258e39002fe5850252be75b09fdc12539b04d36a57c9346254325501260a0e20c1697303af4f1eca3821fef093ef07d9710694eb90034f10e8faea2a9b750075c5a42b0e2a519a5d315005b2568225ae1c8a90c07e670e21fe94164b91d6b3a7c9ee4084f00eb15eaad86b9eaf645ee9a0b6ede780bd319e4e948ed3067a20af31528cdb939833e8aac33e80e75615115f7dd7fb1e40945e172bcadf64ff39a67cc4565fc754effd1349d5d8af47814c91faed204717146d6d4ca5d831251265fb6e7531d13104fc7de57e3e21a46a60ec50ad6884dd3f897d4db719d530ee8ea1c67b6f00abfe7ae4ad99f72b7e419f04afe3d407b283f74d2c5d71a50c78a1f9e9c94b65ea9cc48d9ec36a89037ffeb20a533e78f5c27619070ec49f868343143e5c9dda7e89cf50e07ebf24cf6684f7eea869667850dbdd36b1ecc4cd77a04b7154268439840119ca46282e10c6983b44ed98276287a8317167b621c98d80ac1637eb27f258513525a95922dd0f88972cbd0df2e86a8aceddd2d0858f4c5f7b858549451a082a397d4f73face090e559a608cf2e886f7361f42399efd0919074c9b24effdb3bc34a87bdfd437f08776e129697a05c56e4cfcc0e8d51514c51bef98ba540d261da41f95af3bb682d108c41476cc7c6fa2c0885355cdf081764a01821dfbbde4b4b0a44bfecf480de9191320496f1ffd6ed3dbac5b71f7925c0bece694ce4a7f1dbeee5182b1fc6ae5147ae373cee08f516b372f3c87aea01749733a60c89a70192098466d77dd2e25279aedb886dfd61989d6bd72862c389a3e8f45ea0b9d5155ff376cf5403b29", 0x1000}], 0x2, 0x4, 0x1788d660) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000012c0)='memory.swap.current\x00', 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000001300)=0xfff, 0x4) 12:17:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_WAITACTIVE(r0, 0x5607) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000280)="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", 0x15a}], 0x2) 12:17:32 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x772, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:32 executing program 3: syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) [ 3242.866003] bond2394: making interface veth7977 the new active one [ 3242.878429] bond2394: Enslaving veth7977 as an active interface with an up link 12:17:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x40000}, 0x0) 12:17:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:33 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x2d3a0000}, 0x0) [ 3243.020609] bond2394: Enslaving veth7979 as a backup interface with an up link 12:17:33 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x38, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6205f96cfc83"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) 12:17:33 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x773, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3243.123376] validate_nla: 14 callbacks suppressed [ 3243.123384] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3243.198811] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3243.283360] bond2395: making interface veth7981 the new active one [ 3243.292184] bond2395: Enslaving veth7981 as an active interface with an up link [ 3243.303509] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3243.376795] bond2395: Enslaving veth7983 as a backup interface with an up link 12:17:33 executing program 1: perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xed, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0xffdffffe, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_unlink(&(0x7f0000000140)='eth0\x00') 12:17:33 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x774, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:33 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x40000000}, 0x0) 12:17:33 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x38, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6205f96cfc83"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) 12:17:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x1fffff}, 0x0) 12:17:33 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000020000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024000f05deffff3f07a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x38, 0x2, [@TCA_RSVP_ACT={0x34, 0x6, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0x10, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x1d, r5}, 0x10, &(0x7f0000000400)={&(0x7f00000003c0)=@can={{0x3, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "31bd86d7ed160397"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r6, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0)='devlink\x00') setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000740)=0xc1, 0x4) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x120, r7, 0x400, 0x70bd2c, 0x8, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x20}, {0x6, 0x11, 0xa8ed}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}, {0x6, 0x11, 0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x368}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7}}]}, 0x120}, 0x1, 0x0, 0x0, 0x850}, 0x4000) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4a342, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x90, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4800}, 0x40) [ 3243.627074] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3243.648372] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:17:33 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x57000000}, 0x0) 12:17:33 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x60000000}, 0x0) [ 3243.785093] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3243.816373] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:17:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1f) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1b, 0x0, &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002bbd700005002f000000000008003b0001000000050038000000005108003a3e00000000050038000000000008003a0003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x4c, r4, 0xe01, 0x70b52b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffff7fc}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc040) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='.\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00082dbd7000fbdbdf250e00000008003b000008000008003200bd0000000800390000800000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24008840) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2040090}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200025bd7000fbdbdfad11000000050030000000080000000000000000000ff7e6cc632eeb553e203d9299848ab9eb9f4f7193040fa4b9d6f03e57c151b11917b180430371fde17add57fe6e5f83885204ec3d6a79a9ee0105aae9087662e2c0817b7cbd3ba002f0d87890d0da1b09c2519cb31aa39b33f1262b01b740bb95da6786b7cc6014f1597e06bde37f890e5ad36644feaf58a8cbc3"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x400c091) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x3c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x25c4}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20002abd7000ffdbdfa1c5f211000500330001000000050038000000000008003a000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20010040) 12:17:33 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x775, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3243.842904] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:33 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) 12:17:33 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x38, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6205f96cfc83"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) 12:17:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x5a, &(0x7f0000000500)={@local, @empty, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x20, 0x2b, 0x0, @local, @ipv4={[], [], @dev}, {[@dstopts={0x0, 0x0, [], [@enc_lim, @padn]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 12:17:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0x0, 0x91, &(0x7f0000000280)=""/145}]}) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f0000000040)) 12:17:34 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x776, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:34 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xed, 0x3, 0x0, 0x0, 0x0, 0x0, 0x454, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0xffdffffe, 0x2, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) gettid() syz_open_procfs$namespace(0x0, 0x0) getpgrp(0x0) mq_notify(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mq_unlink(0x0) [ 3244.125957] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = semget$private(0x0, 0x3, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000180)=""/5) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000000)=""/209) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xf0ffff}, 0x0) 12:17:34 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x65580000}, 0x0) 12:17:34 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x777, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:34 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x38, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6205f96cfc83"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) 12:17:34 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x81000000}, 0x0) 12:17:34 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x40200, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000440)={0x3, 0x24, 0x800}) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000008a81484f8c07226725b77422faf7591e5da9b054d0bc88e92c41a306c0d70821d49451aa92ca60c7be5a2696472869ed9bdd68937fb7b0426d60e90bb5c2f410a55d3627636b56e85892bbb213f272e3c354aef155e0bd9cbb0953cbc92aed2ce846ed52d94525a04c1828176b97fed2003bbc44d95d239dec28a6d9349ea119fe7d4f8000000000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r4, 0x2}, 0x8) r5 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r5) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000004c0)='X', 0x1, r6) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0xf000000, 0x5, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x990a7a, 0x8, [], @value64=0xc496}}) r7 = request_key(&(0x7f0000000380)='rxrpc\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)='\x00', r6) keyctl$search(0xa, 0x0, &(0x7f0000000300)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x0}, r7) r8 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x401, 0x100000) write$UHID_GET_REPORT_REPLY(r8, &(0x7f00000002c0)={0xa, {0x8, 0x81, 0xff}}, 0xa) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) bind(r1, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x4, 0x4}}, 0x80) [ 3244.272160] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3244.349702] sctp: [Deprecated]: syz-executor.3 (pid 7306) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3244.349702] Use struct sctp_sack_info instead [ 3244.377521] sctp: [Deprecated]: syz-executor.3 (pid 7313) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3244.377521] Use struct sctp_sack_info instead 12:17:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f000000dc80)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000001940)={0xa, 0x4e23, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000001b40)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x2, 0x0) io_setup(0x0, 0x0) 12:17:34 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x778, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x7, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2000000}) fstat(0xffffffffffffffff, &(0x7f0000000300)) r3 = dup(r2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000002980)={r6, @in6={{0xa, 0x4e21, 0x8, @loopback, 0x4000}}}, &(0x7f0000002a40)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000002a80)={r7, @in6={{0xa, 0x4e21, 0x4, @ipv4={[], [], @multicast2}, 0x7f}}, 0xbe, 0x20, 0x80000000, 0x5f5, 0x20, 0x400, 0x3f}, &(0x7f0000002b40)=0x9c) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x10200, 0x0) r8 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$VHOST_RESET_OWNER(r8, 0xaf02, 0x0) readahead(r8, 0x100000004118, 0x401) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) [ 3244.488889] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 12:17:34 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x88a8ffff}, 0x0) 12:17:34 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x38, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6205f96cfc83"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x1000000}, 0x0) 12:17:34 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x779, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3244.643170] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3244.672795] sctp: [Deprecated]: syz-executor.3 (pid 7330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3244.672795] Use struct sctp_sack_info instead [ 3244.685821] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:34 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x8001}, 'syz0\x00'}) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 12:17:34 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0x9effffff}, 0x0) 12:17:34 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x38, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6205f96cfc83"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) [ 3244.729265] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3244.783810] sctp: [Deprecated]: syz-executor.3 (pid 7367) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3244.783810] Use struct sctp_sack_info instead 12:17:34 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x77a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:34 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x38, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6205f96cfc83"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:34 executing program 1: r0 = gettid() clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000a80)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86\x06\x00\xf1/V\x8cvS\xa6Kfu\x9dX\xcc\r\x12\x11\x19\xe7k\xaecz(n%~\xad\x14IS\xc1\x04\xf7Ml\x9f8\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb?\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\nQj\x9b}$\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x18\x8e\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcU\xe0\xff\xff\xff\xff\xff\xff\xff\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x9c\x14\xe8\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\x8f=\xd8*\x10\xc7^3\xd0\xa7\xaf\xa6\x96\xa2\x13\x1f,\b\xcf1J\xd9\x13Q\x94R/\xdf\x1eD+\xf35\xcbH\xe6\x0f\xe0]\xef\x8b\xcdk\xfe\xf6\xcc+rp\xd5\b~\xf6\xa2\x87\xedD\x9c_\xd3\x90\x00\xb3\x8c\xce\xfb\x18\x1f\xbd<\xc2bO\x88\x03n% \x14\x8f\x18\tT\x9e\xe7\x93\x84\\\xef\xc7@\xcc\xf1\xca\x94\x1b\xd8\xc9\x93\xa6y^5\xe1\x15f\xe5\xfeu\xab\\\x01~\x88\x7fl\xd3a\x85\x05\x11\x85\xc3\xb0\xa8\xe1Gc\xa1\x9e\xe4\x92\x92T;\xea\xed\xbc\x93\x85\x9f\xd5D \x1d\xdaz\xf4\x18\xa5\xe8\xb5\xe0\x9b\xe7\xa9\xf1n\x02%LH\xf7\"$\xda\xc9\xf4\xa0\xde\x80\xea?\xca<\x84\xe9\xf9\xaa[:\"\xf8\xc4\x9e\x03$Q\xce4\x83\xe2p1\xa3O\x83\x01)\xc5\x90\xae\x12q\xac\xa9F\xdeh\xaciC\x9d\x11\xfa\xac\xc50\xc1\x10\x00\x00\x00\x00\x94+\xd9h\xe2t\x89:w\xe3\xdbn\x0f\xe8\xc1\xfe\xc4\xd0\xb2\rp\x19$LE\x9f\xaa\xeaXV4.9-R\xfde\t\xb6\xeb\xbc\xbbXy\x04\xad\x1c\x80\x9f\x01+\xe7[\x87f\x99\xc9]\x11 \x95\xe1\xcf\x11\xf6\\\x12c\n\x14\xf8_WE\xf9\n\xb3\xb8;\xf5V\xf8I\xfd\x0e\xf4\xd0i\x13\xf2\xc9\xd3r\xfd\x14\xc6#1B\xf9\x03\x11wJR\x1a\x1b\xe8\xd30\xdc\xb0\x1bA\xed\xc8\x82\xf9iI\x162?`\x18\x87r{:1\x91{z\x13y\xfd1u;?\x0f\xae\x1cB\xcd\xa3\xf4\x8a\x01\xeb\xa7\x8d\x81\x88\xea\xb9X\x91\x81FT\x82\b\xfc\x02\xb7\xa9\xa2eluZ\xf3\\\xd4\x9e\x8f\x98\x86B\x12\xe0\x97\x8e\x8e\xb1y\x1c\x97T\xe7\xb1\xb7$\x00\xc2\x95<\xfd\xe7\x9e\xfd\xa8\xee\xc9\x83\xa1\x98M\xf2c\x02\xdc\xfe\xba\xf6\xc8\xc6\x9b\x81\x1c\xbb\xb8)5\x1c\x00\x89PA\x98\xfc,\xcfmvNV\x03\xe6\xec\xa3\xec\x19\xcb\x00\xcc\xcb\x0e\xe8:\x80\xf0\x1fc\x11\x1a\xdd|Ra\xec\xe2\xdcS\x86^\x1e\xf8k\xfc\x03I\x0e\xeaA.<\x19\xedO\x9d\xdd0\xf7\xdd\xb4\xbaC\x12\xf2u\xacv\xc4\xa9\x9d\nN\xe6\xd2\xf0\xb2\xee\xd5\xb9\xdc\x96k1p\xa3y\x01\xf2\x1bn<\xab\xf1B\td\f\xcf\xd2\x9b\x93\xf8E\xd7\xab\xc1\xddIu\x14\x8b\xee\xf2>\x15\x9d\n\xca\x14\xb9\x17\xd1\x8bp\xf7\x81\x93\xa2\xfe\xf0[\xbeDQ\xee\x88&C\xab\xf3\xf7\x14\x94\xfb\xedN\xc2g\xe8\x9104', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') read$FUSE(r2, 0x0, 0x0) write$P9_RUNLINKAT(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 12:17:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f0000000000)="7a229561b03a7ae6f0ce6c6566718f5900c6bb7219f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf0}, {&(0x7f0000000100)="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", 0x150}], 0x2) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000002c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000280)=[{}]}, 0x78) 12:17:34 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xf0ffffff}, 0x0) 12:17:35 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) 12:17:35 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x77b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x2000000}, 0x0) 12:17:35 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x38, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6205f96cfc83"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2000000}) fstat(r1, &(0x7f0000000640)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024000f05deffff3f07a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x38, 0x2, [@TCA_RSVP_ACT={0x34, 0x6, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0x10, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', r6, 0x2f, 0x0, 0x0, 0x0, 0x0, @mcast2, @remote, 0x1, 0x10, 0x5, 0x6}}) 12:17:35 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xfe0f0000}, 0x0) [ 3245.149230] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:35 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x77c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:35 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xfeff0000}, 0x0) 12:17:35 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x38, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6205f96cfc83"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) [ 3245.267517] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3245.376161] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3245.470959] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:37 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 12:17:37 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x77d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:37 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xff0f0000}, 0x0) 12:17:37 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x38, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6205f96cfc83"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1aa33e7011780ee8928b44b374528eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x0) 12:17:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x3000000}, 0x0) 12:17:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="ca541d5c821c898b12c7fa1f1ca6bc561e83d8ee4b39854ab913f5a6fa0a65cf0c333dee7c59ba37c222584023b196d284ddf4d314b3d11794d86bd898f6c9884c65eed8f152964345514bb32cce8d9a4cddedf60fe640f73c12422b29adf0e6037459e4ed9fd08a095ab478011812169674bca5a1e5cb4e963f0248460c80dafd361761799ed32447c1bd5c7632f5fe0c23d34bef6c9937688f23c792b4e0cd3a68a569a7532695859935f383e3f7885db14db3964459a851d048cd666888189812b1aa2682d5cd9ee0cc7510fa7d8845070ca7ea57405e45dd15179c17dac63cbeba201a6aa1bd30f79a89040f67efe422b18b212a2dd6d67794de915d38558f228ec574e1a00dde23f6865aaef5bb8af28c357dc89013a13a88d4fe57755d8f077c6460ba20a71ab6743fb5890071021041209740cb9c764a303bf3ce07001e385cb1ce3a73a0f79d13beceb259d0", 0x150}], 0x2) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x6) 12:17:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$KDDISABIO(r1, 0x4b37) writev(r0, &(0x7f0000001340)=[{&(0x7f0000000000)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x100000000000009e) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 12:17:38 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xffffa888}, 0x0) 12:17:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340), 0x0) 12:17:38 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x38, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6205f96cfc83"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) [ 3248.209172] validate_nla: 1 callbacks suppressed [ 3248.209178] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:38 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x77e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:38 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) quotactl(0x40000080000100, 0x0, 0x0, 0x0) 12:17:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2000000}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2000000}) fstat(r1, &(0x7f0000000280)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f00000005c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={[], [], @private=0xa010101}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2000000}) fstat(r2, &(0x7f0000000640)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) fstat(r3, &(0x7f0000000300)) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000080)={0x3, 0x0, 0xf, 0x19, 0x22, &(0x7f00000006c0)}) r5 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xc0d, 0x1a040) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0xf99, 0xef05, 0x9, 0x1}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r6, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:38 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xfffff000}, 0x0) 12:17:38 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x77f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x4000000}, 0x0) 12:17:38 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x38, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6205f96cfc83"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) [ 3248.953943] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:38 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x38, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6205f96cfc83"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:39 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x780, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:39 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xffffff7f}, 0x0) 12:17:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) quotactl(0x40000080000100, 0x0, 0x0, 0x0) 12:17:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) quotactl(0x40000080000100, 0x0, 0x0, 0x0) 12:17:39 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x781, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3249.178564] bond2396: making interface veth7987 the new active one [ 3249.187100] bond2396: Enslaving veth7987 as an active interface with an up link [ 3249.201725] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:39 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x38, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6205f96cfc83"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) [ 3249.325048] bond2396: Enslaving veth7989 as a backup interface with an up link 12:17:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0xfffffda2}], 0x2) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup(r1) 12:17:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) quotactl(0x40000080000100, 0x0, 0x0, 0x0) 12:17:39 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xffffff9e}, 0x0) 12:17:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x5000000}, 0x0) 12:17:39 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x782, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:39 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x38, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6205f96cfc83"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:39 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xfffffff0}, 0x0) [ 3249.493048] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:39 executing program 1: quotactl(0x40000080000100, 0x0, 0x0, 0x0) 12:17:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) shmctl$SHM_LOCK(0x0, 0xb) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="ca541d5c821c898b12c7fa1f1ca6bc561e83d8ee4b39854ab913f5a6fa0a65cf0c333dee7c59ba37c222584023b196d284ddf4d314b3d11794d86bd898f6c9884c65eed8f152964345514bb32cce8d9a4cddedf60fe640f73c12422b29adf0e6037459e4ed9fd08a095ab478011812169674bca5a1e5cb4e963f0248460c80dafd361761799ed32447c1bd5c7632f5fe0c23d34bef6c9937688f23c792b4e0cd3a68a569a7532695859935f383e3f7885db14db3964459a851d048cd666888189812b1aa2682d5cd9ee0cc7510fa7d8845070ca7ea57405e45dd15179c17dac63cbeba201a6aa1bd30f79a89040f67efe422b18b212a2dd6d67794de915d38558f228ec574e1a00dde23f6865aaef5bb8af28c357dc89013a13a88d4fe57755d8f077c6460ba20a71ab6743fb5890071021041209740cb9c764a303bf3ce07001e385cb1ce3a73a0f79d13beceb259d0", 0x150}], 0x2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x10040) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000002c0)=""/140) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000280)=0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x45c801, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.origin\x00', &(0x7f0000000400)='y\x00', 0x2, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x7, 0x9}, {0x5, 0x1}]}) 12:17:39 executing program 1: quotactl(0x0, 0x0, 0x0, 0x0) 12:17:39 executing program 1: quotactl(0x0, 0x0, 0x0, 0x0) 12:17:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) writev(r0, &(0x7f0000001340)=[{&(0x7f0000000000)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f50100ff878606e2ba0ac63c00517c0ba318762ab24ca3bd6c5c507aaa39af835d8d91a2cac4ff326c8e3b5a047f20c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4180224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619ab6dc292151ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d157341e73dfdc9209350eae5dc23cae3c2ab9b044d1b2d6f289696150ca1ce3b2a87ebef312de68920bb53d4ac525bd012b63b1f4b277f3ac6c7700707031486a8ad9c3e1d6206b877f08ced3a2a4ed38892b2df8e08c8b6c420b94b661d6747c410705506707b1503baf8a8cf7aeb93", 0x14b}, {&(0x7f0000000280)="ca541d5c821c898b12c7fa1f1ca6bc561e83d8ee4b39854ab913f5a6fa0a65cf0c333dee7c59ba37c222584023b196d284ddf4d314b3d11794d86bd898f6c9884c65eed8f152964345514bb32cce8d9a4cddedf60fe640f73c12422b29adf0e6037459e4ed9fd08a095ab478011812169674bca5a1e5cb4e963f0248460c80dafd361761799ed32447c1bd5c7632f5fe0c92b4e0cd3a68a569a7532695859935f383e3f7885db14db3964459a851d048cd666888189812b1aa2682d5cd9ee0cc7510fa7d8845070ca7ea57405e45dd15179c17dac63cbeba201a6aa1bd30f79a89040f67efe422b18b212a2dd6d67794de915d38558f228ec574e1a00dde23f6865aaef5bb8af28c357dc89013a13a88d4fe57755d8f077c6460ba20a71ab6743fb5890071021041209740cb9c764a303bfecd8dd88ac4339279f3ce07001e385cb1ce3a73", 0x145}], 0x2) 12:17:39 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x783, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:39 executing program 1: quotactl(0x0, 0x0, 0x0, 0x0) 12:17:39 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0x6) writev(r1, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x6000000}, 0x0) 12:17:39 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000, 0x0, 0xffffffff}, 0x0) 12:17:39 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x38, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6205f96cfc83"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340), 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000000)) 12:17:39 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmsg$sock(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001480)="4d19be16b52fe1fb60ae91b8d1f4a6a2b952c2c93cbcf7ae94165b44771b11e33f65490fbc4228b50f5f38706578bea101a063d8c9b605877016087a5f6a2cd59d04ee9c1435f612b8b118aed17d4f3d9f017e5de8e8c2aaabcf15fc8fb0a0fdf06526a011c9d6c54d5b3bd1289f208e155c3bef1625da330b7f26eb8649f31334d31786070e5595bd632ab6b562f08058216c8d18ed821fc508c36f8419d029c078411a42338972191b936aec8114731bc32cb73052ee2a5757b5dbc836b0ede3ebafb7c4e25692cb", 0xc9}], 0x1}, 0x0) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd", 0x72}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee7714903088dfd546a136d40646857b851b65a7a918c58881d275d5d71239c7698d7bdb3f879f49436bbbd87586553407860397d48842400126f8703ddc55ba4e", 0xec}, {&(0x7f0000000000)="40c11437fb00d6eab04b0c06251f8168813a461ace70236fa0348db1d319fe147c2390db325b8f9969aec8c50d", 0x2d}, {&(0x7f00000019c0)="b65836c3d98df987e963b3f2c6cd9a05289662018771ef0319e3d867bbdf237a39faca25190ea708520ec42d202286b0e1971368ddbefe57a0321b27c8f96fc298daf744180af6729d8334216e730e3b47c1a011a77c60e62147ce42dede17c7719e1c0989322ff56d80305145", 0x6d}], 0x4}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f093e579a0ad13bbfa6dfcf5f92e9137fcecd3422187adb2613d1cb2a10ac11024822cad9f16a8b47c13f163ae0a1beeec0926acde449fbfe0e5541045b2c313750354dae2754d46379a01c17bd3c8c6f824123ab7b626a841f31bee8284b373074ba53a7f519de6ff25f6c4177fcf5384847410058370bd3a07df3", 0x7c}, {&(0x7f00000003c0)="9c5948ce9528017c27de9f52", 0xc}, {&(0x7f0000001b40)="328da01e65d586a9c60700f1b6767f0cf53ac14b8dcb6f7c26d8e51a46d331b6682ad97b159f90fa1d92d89d922946a445adbd3995", 0x35}], 0x3}}], 0x2, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 12:17:39 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x784, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3249.838496] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024000f05deffff3f07a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x38, 0x2, [@TCA_RSVP_ACT={0x34, 0x6, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0x10, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x7ff, 0x289, 0xbbba, 0x1, r1, 0x8bc, [], r6, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x40) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) [ 3249.909205] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:39 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x2) 12:17:39 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x785, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:39 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x38, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6205f96cfc83"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:40 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x3) [ 3250.080611] nla_parse: 1 callbacks suppressed [ 3250.080620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3250.116951] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:40 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x786, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x7000000}, 0x0) 12:17:40 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:40 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x4) [ 3250.272957] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:17:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000000)) [ 3250.318289] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3250.351401] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3250.494700] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff31}]) 12:17:40 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x787, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:40 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x5) 12:17:40 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:40 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1be8) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0xa2e, 0x3, 0x5, 0xb0b0b0b0}) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f00000000c0)={r5, 0xfc98}) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0x15d}, {&(0x7f0000000100)="ca541d5c821c898b12c7fa1f1ca6bc561e83d8ee4b39854ab913f5a6fa0a65cf0c333dee7c59ba37c222584023b196d284ddf4d314b3d11794d86bd898f6c9884c65eed8f152964345514bb32cce8d9a4cddedf60fe640f73c12422b29adf0e6037459e4ed9fd08a095ab478011812169674bca5a1e5cb4e963f0248460c80dafd361761799ed32447c1bd5c7632f5fe0c23d34bef6c9937688f23c792b4e0cd3a68a569a7532695859935f383e3f7885db14db3964459a851d048cd666888189812b1aa2682d5cd9ee0cc7510fa7d8845070ca7ea57405e45dd15179c17dac63cbeba201a6aa1bd30f79a89040f67efe422b18b212a2dd6d67794de915d38558f228ec574e1a00dde23f6865aaef5bb8af28c357dc89013a13a88d4fe57755d8f077c6460ba20a71ab6743fb5890071021041209740cb9c764a303bf3ce07001e385cb1ce3a73a0f79d13beceb259d0", 0x150}], 0x2) 12:17:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x8000000}, 0x0) 12:17:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="ca541d5c821c898b12c7fa1f1ca6bc561e83d8ee4b39854ab913f5a6fa0a65cf0c333dee7c59ba37c222584023b196d284ddf4d314b3d11794d86bd898f6c9884c65eed8f152964345514bb32cce8d9a4cddedf60fe640f73c12422b29adf0e6037459e4ed9fd08a095ab478011812169674bca5a1e5cb4e963f0248460c80dafd361761799ed32447c1bd5c7632f5fe0c23d34bef6c9937688f23c792b4e0cd3a68a569a7532695859935f383e3f7885db14db3964459a851d048cd666888189812b1aa2682d5cd9ee0cc7510fa7d8845070ca7ea57405e45dd15179c17dac63cbeba201a6aa1bd30f79a89040f67efe422b18b212a2dd6d67794de915d38558f228ec574e1a00dde23f6865aaef5bb8af28c357dc89013a13a88d4fe57755d8f077c6460ba20a71ab6743fb5890071021041209740cb9c764a303bf3ce07001e385cb1ce3a73a0f79d13beceb259d0", 0x150}], 0x2) 12:17:40 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x6) [ 3250.756095] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0xb0040, 0x0) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0xfffffff8}], 0x2) 12:17:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:40 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x788, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:40 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000140)=""/69, 0x45}], 0x23, 0x0, 0xffffffffffffff04}}], 0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x400000000000, 0x0) [ 3250.895981] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:40 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:41 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x789, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(0xffffffffffffffff, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x18}], 0x1000000000000308) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x45) [ 3251.048639] bond2399: making interface veth7997 the new active one 12:17:41 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x7) [ 3251.114718] bond2399: Enslaving veth7997 as an active interface with an up link [ 3251.147042] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x0) syz_emit_ethernet(0x62, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x2c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "457a5ef5bb8614c2725690c765dc45ee"}]}}}}}}}}, 0x0) 12:17:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x9000000}, 0x0) 12:17:41 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x78a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:41 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:41 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x8) [ 3251.286596] bond2399: Enslaving veth7999 as a backup interface with an up link [ 3251.310012] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 3251.327712] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@mcast1, 0x0, r3}) 12:17:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc}]}]}]}, 0x3c}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="ca541d5c821c898b12c7fa1f1ca6bc561e83d8ee4b39854ab913f5a6fa0a65cf0c333dee7c59ba37c222584023b196d284ddf4d314b3d11794d86bd898f6c9884c65eed8f152964345514bb32cce8d9a4cddedf60fe640f73c12422b29adf0e6037459e4ed9fd08a095ab478011812169674bca5a1e5cb4e963f0248460c80dafd361761799ed32447c1bd5c7632f5fe0c23d34bef6c9937688f23c792b4e0cd3a68a569a7532695859935f383e3f7885db14db3964459a851d048cd666888189812b1aa2682d5cd9ee0cc7510fa7d8845070ca7ea57405e45dd15179c17dac63cbeba201a6aa1bd30f79a89040f67efe422b18b212a2dd6d67794de915d38558f228ec574e1a00dde23f6865aaef5bb8af28c357dc89013a13a88d4fe57755d8f077c6460ba20a71ab6743fb5890071021041209740cb9c764a303bf3ce07001e385cb1ce3a73a0f79d13beceb259d0", 0x150}], 0x2) 12:17:41 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xa) 12:17:41 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:41 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x78b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3251.542448] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3251.570445] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3251.584138] net_ratelimit: 6 callbacks suppressed 12:17:41 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xc) 12:17:41 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x78c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3251.584148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 12:17:41 executing program 1: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000540600fe8000000000000000000000000000bb00000000000000000000ffff00", @ANYRES32=0x41424344], 0x0) [ 3251.732474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 12:17:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xa000000}, 0x0) 12:17:41 executing program 1: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfe40, 0x0) chdir(&(0x7f0000000440)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x202, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) fallocate(r0, 0x11, 0x0, 0x40002) 12:17:41 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:41 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xe) 12:17:41 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:41 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x78d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:41 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x101000, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) pipe(&(0x7f0000000000)) [ 3251.810674] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:41 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:41 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xf) 12:17:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x1, 0x190, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000ffffffff01080000110000000000000008060300736630000010000000000000000064756d6d793000000000000000000000696662300000000000000000000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff0000000000000000d0000000d000000000010000617270000000000000000000000000002fb266580000000000609e8adb00000038000000000000000000000000000000e0000001000000007f00000118000000000000000000000000000000aaaaaaaaaa00000000000800000000000000000072656469726563740000000000000000b20000000000080000000000000000000800"/400]}, 0x208) 12:17:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:41 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x10) [ 3252.046780] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xc000000}, 0x0) 12:17:42 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x78e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xffffffe8}, {&(0x7f0000000100)="ca541d5c821c898b12c7fa1f1ca6bc561e83d8ee4b39854ab913f5a6fa0a65cf0c333dee7c59ba37c222584023b196d284ddf4d314b3d11794d86bd898f6c9884c65eed8f152964345514bb32cce8d9a4cddedf60fe640f73c12422b29adf0e6037459e4ed9fd08a095ab478011812169674bca5a1e5cb4e963f0248460c80dafd361761799ed32447c1bd5c7632f5fe0c23d34bef6c9937688f23c792b4e0cd3a68a569a7532695859935f383e3f7885db14db3964459a851d048cd666888189812b1aa2682d5cd9ee0cc7510fa7d8845070ca7ea57405e45dd15179c17dac63cbeba201a6aa1bd30f79a89040f67efe422b18b212a2dd6d67794de915d38558f228ec574e1a00dde23f6865aaef5bb8af28c357dc89013a13a88d4fe57755d8f077c6460ba20a71ab6743fb5890071021041209740cb9c764a303bf3ce07001e385cb1ce3a73a0f79d13beceb259d0", 0x150}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20001, 0x0) 12:17:42 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0xff, 0x1, 0x0, 0x40, 0x400000000}, 0x20) 12:17:42 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x57) 12:17:42 executing program 2: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x328, 0x0, 0x198, 0x0, 0x198, 0x198, 0x290, 0x290, 0x290, 0x290, 0x290, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bond\x00', {}, {}, 0xc}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ffffff7fc8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c929a1ab99ffcfc1dc61f80", 0x27}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'macvlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x388) 12:17:42 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x60) 12:17:42 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb3218acc4c402491731bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aee33aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x5, 0x4, @thr={&(0x7f0000000000)="6fe3e5a7d45f9147c036f28310d4714a3c7ce76a4869121f1e2098b62230505067dff441f65ed8aa5215ec132ecb6988029d0d2ee99f761b32af87ce8a05b2951ea3f836f840e3cec756df2465312f4374f286e9ee97b14225371a7169e4d565fb0b325302a9182b8eb5dec667f98b310582c2b38602b9d89dc55943bac1e0699dba4af1bd983969f534d971dc216e18a0ce25173127bea986e26a0c89130c73cd15b5b7cd6348a1b476441be7279a47c4cfeaf055a63b9f20e1e976f76dbda6", &(0x7f0000000280)="a22b9bc7398c4e576899733a601e6142d64445c641193673277f3b932c536a305cf0d3af93b86445ee38b8806df423a56a9ee2d2281deecdd0b413af594084ada87c51f211cd4f17dcfdd1a7ae35b5c47634c4068d27e2404dc1d9c87d6c0b9cf583a055c47dd1ca1c5c0bbae720a912e5847484af78a3fac669ddf051a379d470315a52bb8ce4cee7c45287d6be7fdf05ef7eecd41301232bc2c131d342433d19ce0bb1e79c"}}, &(0x7f0000000340)=0x0) timer_gettime(r1, &(0x7f0000000380)) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 12:17:42 executing program 3: mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x100400, &(0x7f0000000080)={[{@xino_auto='xino=auto'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@dont_appraise='dont_appraise'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) accept4$nfc_llcp(r0, 0x0, &(0x7f00000000c0), 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, 0x14, 0x20, 0x70bd26, 0x25dfdbff, {0x18, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x33, 0x1, "b78f903c495e55f30cf0e94e866a1b673ee3373ce880fe42f6488b4dfec256a756bd03a12b8151b362615fb177fe0d"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "66bdf1b7dbd4d6"}, @INET_DIAG_REQ_BYTECODE={0xa5, 0x1, "900deb6f399ea36043d3b6b15f61c923461caa213c7e61c98b0efedd1bac928a6bc752148ccb55e81ae4e57c7fdff486b7a34a26da5b9001e4ca98f081e557f40729c8a4349098ab10e35efcc4daa4455d2f9b0daad0578016b1e3c7c5a484705ac8e60caaf4996bbd2643274e008fb78270932bcf0f64e0b8de4bd485f98ea84e0468637a2f7eef9cdf41cac1a16ee25e2a744b1344d2164b62d12904ae10443f"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000000)) 12:17:42 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x78f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3252.406476] xt_CT: No such helper "pptp" [ 3252.460488] xt_CT: No such helper "pptp" 12:17:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xe000000}, 0x0) 12:17:42 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x9) 12:17:42 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xf0) 12:17:42 executing program 2: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca8f76d8ea513dfb08c00940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e17a5", 0x58}], 0x1) 12:17:42 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x790, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000000)={0x3, {{0x2, 0x4e20, @empty}}}, 0x88) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f00000004c0)) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f00000000c0)={0x3c, @multicast2, 0x4e22, 0x0, 'fo\x00', 0x11, 0x4, 0x28}, 0x2c) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x3a) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x8010) 12:17:42 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xfffffffffffffeca}, {&(0x7f0000000100)="ca541d5c821c898b12c7fa1f1ca6bc561e83d8ee4b39854ab913f5a6fa0a65cf0c333dee7c59ba37c222584023b196d284ddf4d314b3d11794d86bd898f6c9884c65eed8f152964345514bb32cce8d9a4cddedf60fe640f73c12422b29adf0e6037459e4ed9fd08a095ab478011812169674bca5a1e5cb4e963f0248460c80dafd361761799ed32447c1bd5c7632f5fe0c23d34bef6c9937688f23c792b4e0cd3a68a569a7532695859935f383e3f7885db14db3964459a851d048cd666888189812b1aa2682d5cd9ee0cc7510fa7d8845070ca7ea57405e45dd15179c17dac63cbeba201a6aa1bd30f79a89040f67efe422b18b212a2dd6d67794de915d38558f228ec574e1a00dde23f6865aaef5bb8af28c357dc89013a13a88d4fe57755d8f077c6460ba20a71ab6743fb5890071021041209740cb9c764a303bf3ce07001e385cb1ce3a73a0f79d13beceb259d0", 0x150}], 0x2) 12:17:42 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x791, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x2, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) ioprio_set$uid(0x3, r2, 0x6000) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:42 executing program 2: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:42 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0xff, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 12:17:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x10000000}, 0x0) 12:17:42 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x300) 12:17:42 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x792, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f0000000000)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000280)={0x20, 0x7, 0x1, 0x8000, 0x7, [{0x7, 0x8, 0x1, [], 0x4}, {0x20, 0x7, 0x213, [], 0x181}, {0x8, 0x1ff, 0x9, [], 0xa00}, {0x5, 0x3f}, {0x2, 0x1, 0xa01, [], 0x3408}, {0x4, 0x7f, 0x5}, {0x9, 0x2, 0x8, [], 0x1000}]}) 12:17:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = memfd_create(&(0x7f0000000000)='^$*]\'\'#)\x00', 0x0) fgetxattr(r1, &(0x7f0000000500)=@known='com.apple.FinderInfo\x00', &(0x7f0000000040)=""/55, 0x37) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="39000000130009006900000000000000ab008000200000004600010707000014190001001000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0x1c8, 0xd0, 0x0, 0xd0, 0x1c8, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], '\x00', 'veth0_vlan\x00', {}, {}, 0x3a}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "e58f"}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008001b000a"], 0x3c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@private0, 0x4b, r6}) 12:17:42 executing program 2: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000000)=0xffffffff) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="ca541d5c821c898b12c7fa1f1ca6bc561e83d8ee4b39854ab913f5a6fa0a65cf0c333dee7c59ba37c222584023b196d284ddf4d314b3d11794d86bd898f6c9884c65eed8f152964345514bb32cce8d9a4cddedf60fe640f73c12422b29adf0e6037459e4ed9fd08a095ab478011812169674bca5a1e5cb4e963f0248460c80dafd361761799ed32447c1bd5c7632f5fe0c23d34bef6c9937688f23c792b4e0cd3a68a569a7532695859935f383e3f7885db14db3964459a851d048cd666888189812b1aa2682d5cd9ee0cc7510fa7d8845070ca7ea57405e45dd15179c17dac63cbeba201a6aa1bd30f79a89040f67efe422b18b212a2dd6d67794de915d38558f228ec574e1a00dde23f6865aaef5bb8af28c357dc89013a13a88d4fe57755d8f077c6460ba20a71ab6743fb5890071021041209740cb9c764a303bf3ce07001e385cb1ce3a73a0f79d13beceb259d0", 0x150}], 0x2) [ 3253.068472] x_tables: duplicate underflow at hook 2 12:17:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x6100, 0x0) read$snddsp(r1, &(0x7f0000000280)=""/4096, 0x1000) writev(r0, &(0x7f0000001340)=[{&(0x7f0000001640)="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", 0x192}, {&(0x7f00000014c0)="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", 0x150}], 0x2) 12:17:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000000)) accept$unix(r2, 0x0, &(0x7f0000000040)) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:43 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x793, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:43 executing program 2: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:43 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x500) [ 3253.218845] x_tables: duplicate underflow at hook 2 12:17:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x1a020000}, 0x0) 12:17:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:43 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x794, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:43 executing program 1: semop(0x0, &(0x7f00000002c0)=[{0x0, 0xffff}, {0x0, 0x367}], 0x2) 12:17:43 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x600) 12:17:43 executing program 2: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000440)={0x0, {{0x2, 0x4e23, @multicast2}}}, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2000000}) fstat(r0, &(0x7f0000000640)) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000001340)=[{&(0x7f0000000280)="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", 0x182}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:43 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:43 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x700) [ 3253.439557] validate_nla: 11 callbacks suppressed [ 3253.439565] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:43 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x795, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:43 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:43 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x796, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3253.618345] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x1f000000}, 0x0) 12:17:43 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:43 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xa00) [ 3253.810255] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3253.959695] bond2403: making interface veth8009 the new active one [ 3253.968127] bond2403: Enslaving veth8009 as an active interface with an up link [ 3253.978714] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3254.043187] bond2403: Enslaving veth8011 as a backup interface with an up link 12:17:44 executing program 1: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x79) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto(r0, &(0x7f0000000600)="0400", 0x2, 0x8002, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x60, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 12:17:44 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x797, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) r1 = gettid() tkill(r1, 0x31) ptrace$getsig(0x4202, r1, 0xfc7, &(0x7f0000000000)) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000a) 12:17:44 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:44 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xc00) 12:17:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x20000000}, 0x0) 12:17:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x17, 0x19, 0x132, &(0x7f0000000280)="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"}) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:44 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xe00) [ 3254.319815] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:44 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:44 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) semctl$SETALL(0x0, 0x0, 0x11, 0x0) removexattr(0x0, 0x0) 12:17:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) memfd_create(&(0x7f0000000080)='{/:)-\'(:\xdb!\x00', 0x6) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xfff4, 0x1000, 0x327d09af, 0x1, 0x120}, &(0x7f0000000040)=0x14) 12:17:44 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x798, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340), 0x1000000000000344) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=[@assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0xfff}, @iv={0x68, 0x117, 0x2, 0x50, "4af5091f184ece53cb13df2db52a53e6af012fe7e62152c82709c77624d35db9e69a817d96058c09629e5a03ba9c703962a49c4ee5682018efe8a5c7dd036a69019224e55b17438005c3aa67014b9e2e"}, @assoc={0x18, 0x117, 0x4, 0x7}], 0xb0, 0x2004401c}, 0x20000090) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 12:17:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000000)=0x3) sendfile(r1, r2, 0x0, 0xffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 12:17:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xc) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/223) 12:17:44 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xf00) 12:17:44 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) [ 3254.595024] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3254.639120] audit: type=1804 audit(1596370664.582:6550): pid=8546 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16309 res=1 12:17:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x20010000}, 0x0) 12:17:44 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x799, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000000)={{0x1, @addr=0x4}, "f9447359b850c28644b4b703087aeee3354b23f1c044ca511d0b2eda9602b642", 0x2}) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:44 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xffe) 12:17:44 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000540)='/dev/vcs#\x00', 0x3f, 0x401) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000005c0)={0x6af, 0x2, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x2}, 0x3ff}) preadv2(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/92, 0x5c}, {&(0x7f0000000080)=""/15, 0xf}, {&(0x7f0000000280)=""/150, 0x96}, {&(0x7f00000000c0)=""/46, 0x2e}, {&(0x7f0000000340)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000480)=""/39, 0x27}], 0x8, 0x74, 0xffffffbd, 0x10) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000580)=0x8000003, 0x4) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="ca541d5c821c898b12c7fa1f1ca6bc561e83d8ee4b39854ab913f5a6fa0a65cf0c333dee7c59ba37c222584023b196d284ddf4d314b3d11794d86bd898f6c9884c65eed8f152964345514bb32cce8d9a4cddedf60fe640f73c12422b29adf0e6037459e4ed9fd08a095ab478011812169674bca5a1e5cb4e963f0248460c80dafd361761799ed32447c1bd5c7632f5fe0c23d34bef6c9937688f23c792b4e0cd3a68a569a7532695859935f383e3f7885db14db3964459a851d048cd666888189812b1aa2682d5cd9ee0cc7510fa7d8845070ca7ea57405e45dd15179c17dac63cbeba201a6aa1bd30f79a89040f67efe422b18b212a2dd6d67794de915d38558f228ec574e1a00dde23f6865aaef5bb8af28c357dc89013a13a88d4fe57755d8f077c6460ba20a71ab6743fb5890071021041209740cb9c764a303bf3ce07001e385cb1ce3a73a0f79d13beceb259d0", 0x150}], 0x2) [ 3254.820870] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:44 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x79a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="ca541d5c821c898b12c7fa1f1ca6bc561e83d8ee4b39854ab913f5a6fa0a65cf0c333dee7c59ba37c222584023b196d284ddf4d314b3d11794d86bd898f6c9884c65eed8f152964345514bb32cce8d9a4cddedf60fe640f73c12422b29adf0e6037459e4ed9fd08a095ab478011812169674bca5a1e5cb4e963f0248460c80dafd361761799ed32447c1bd5c7632f5fe0c23d34bef6c9937688f23c792b4e0cd3a68a569a7532695859935f383e3f7885db14db3964459a851d048cd666888189812b1aa2682d5cd9ee0cc7510fa7d8845070ca7ea57405e45dd15179c17dac63cbeba201a6aa1bd30f79a89040f67efe422b18b212a2dd6d67794de915d38558f228ec574e1a00dde23f6865aaef5bb8af28c357dc89013a13a88d4fe57755d8f077c6460ba20a71ab6743fb5890071021041209740cb9c764a303bf3ce07001e385cb1ce3a73a0f79d13beceb259d0", 0x150}], 0x2) ioperm(0x0, 0x200, 0x5) [ 3255.099937] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3255.443403] audit: type=1804 audit(1596370665.392:6551): pid=8647 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="bus" dev="sda1" ino=16309 res=1 [ 3255.469745] audit: type=1804 audit(1596370665.412:6552): pid=8599 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16309 res=1 12:17:45 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:45 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x2d3a) 12:17:45 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x79b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x1a7}], 0x2) 12:17:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x3f000000}, 0x0) 12:17:45 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000000)=0x3) sendfile(r1, r2, 0x0, 0xffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 12:17:45 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x3a2d) 12:17:45 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2000000}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x10001}) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) fstat(r4, &(0x7f0000000640)) fstat(r2, &(0x7f0000000280)) write(r1, &(0x7f0000000000)="27540f94101459d58c559236a2835b5048d0a5af4dac77deba7c2440f84761d50ceb283834293e68cf93c41bce301479b2b29300408fdb4ab7e8637f07bfe3a6b48b05909a00254b3954ac7d2be73787e92be5788c28c14e0e80cf97a8f162e51748c16a1da58d93be5e25780c65d8d48a46855f8f4182136c704dedd6f16d892a9227a3b78023b51fd32d8de915c1b8f4cb24ef91be50659944a7e7f8cb6dd0085fb90278fc026ade930ba7385286be03de55188cdcba7cce2113c104a6b45644e8a3b713c403356a411c5a27cad8", 0xcf) [ 3255.643298] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3255.651518] audit: type=1804 audit(1596370665.602:6553): pid=8661 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16620 res=1 12:17:45 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x79c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:45 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x4000) 12:17:45 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x79d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3255.945374] bond2405: making interface veth8017 the new active one [ 3255.954156] bond2405: Enslaving veth8017 as an active interface with an up link 12:17:46 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) [ 3256.014547] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:46 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x79e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x40000000}, 0x0) [ 3256.172357] bond2405: Enslaving veth8019 as a backup interface with an up link 12:17:46 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x79f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:46 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x5700) 12:17:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000000)=0x3) sendfile(r1, r2, 0x0, 0xffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 12:17:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x2, @local}}, 0x1e) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:46 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:46 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7a0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:46 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x5865) 12:17:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x48000000}, 0x0) 12:17:46 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x6000) 12:17:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340), 0x0) 12:17:46 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) [ 3256.604781] audit: type=1804 audit(1596370666.552:6554): pid=8800 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=15879 res=1 12:17:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r4}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={r4, 0x4, 0x10}, 0xc) writev(r0, &(0x7f0000001340)=[{&(0x7f0000000000)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd753f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9a001be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b0d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf9}, {&(0x7f0000000100)="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", 0x150}], 0x2) 12:17:46 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7a1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:46 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x6558) [ 3256.846225] sctp: [Deprecated]: syz-executor.3 (pid 8855) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3256.846225] Use struct sctp_sack_info instead [ 3256.883054] sctp: [Deprecated]: syz-executor.3 (pid 8855) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3256.883054] Use struct sctp_sack_info instead [ 3256.935325] bond2406: making interface veth8021 the new active one [ 3256.944097] bond2406: Enslaving veth8021 as an active interface with an up link [ 3257.053681] bond2406: Enslaving veth8023 as a backup interface with an up link 12:17:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000000)=0x3) sendfile(r1, r2, 0x0, 0xffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 12:17:47 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:47 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7a2, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x111002, 0x44) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) writev(r0, &(0x7f0000000040), 0x0) 12:17:47 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x8100) 12:17:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x4c000000}, 0x0) 12:17:47 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xf000) 12:17:47 executing program 3: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f00000001c0)={'crc32c-generic\x00'}}) keyctl$describe(0x6, r0, &(0x7f0000000280)=""/244, 0xf4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000040)={0x7, 0x4, [0x20, 0x7, 0x3, 0x0, 0x1], 0xf2f5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x60000000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000100050004001400050005000c001b00050006000b00000008000300930d0000"], 0x30}, 0x1, 0x6c}, 0x0) writev(r2, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="ca541d5c821c898b12c7fa1f1ca6bc561e83d8ee4b39854ab913f5a6fa0a65cf0c333dee7c59ba37c222584023b196d284ddf4d314b3d11794d86bd898f6c9884c65eed8f152964345514bb32cce8d9a4cddedf60fe640f73c12422b29adf0e6037459e4ed9fd08a095ab478011812169674bca5a1e5cb4e963f0248460c80dafd361761799ed32447c1bd5c7632f5fe0c23d34bef6c9937688f23c792b4e0cd3a68a569a7532695859935f383e3f7885db14db3964459a851d048cd666888189812b1aa2682d5cd9ee0cc7510fa7d8845070ca7ea57405e45dd15179c17dac63cbeba201a6aa1bd30f79a89040f67efe422b18b212a2dd6d67794de915d38558f228ec574e1a00dde23f6865aaef5bb8af28c357dc89013a13a88d4fe57755d8f077c6460ba20a71ab6743fb5890071021041209740cb9c764a303bf3ce07001e385cb1ce3a73a0f79d13beceb259d0", 0x150}], 0x2) [ 3257.561954] audit: type=1804 audit(1596370667.512:6555): pid=8887 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16772 res=1 12:17:47 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xfe0f) 12:17:47 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7a3, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="7a229561b03a7ae6f0ce6c6566718f5900c6bb72cf15bfd008aa3e19f59283f55933ff878606e2ba0ac63c00517c0ba35d8d91a2cac4ff326c8e3b5a047fe5c1eb5818588a5821bd713f4966a563a3b544a607982b212bd4a3e7460caf6d1809e89abb7971acc433c9be7531bb4521cceed50c25cadf91e3bf453d10d505316f4728b45ba2e2aefc3aa2a30a7a4188224a56dfe384d5bdd29b3d94b2553e5e9a03e5852f9a9f31045b00dca9862c4cde619a869d9fe351ee20a5ae4199b042eb33cdc64f34a30b0c7a4b776d1573c2ef5fafb0c94fb6eae5dc23cae3c2ab9b044d1b2d6f28969615da8d6c8c4b3e4f5e7ce83159605d2d", 0xf7}, {&(0x7f0000000100)="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", 0x150}], 0x2) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r4}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024000f05deffff3f07a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="68000000ff01270d0000bea7919e435689d6fc00", @ANYRES32=r9, @ANYBLOB="00000000000000000a00000009000100727376700000000038000200340006003000010010000100706564697400000004000280040006000c00070000000000000000000c0008000000000000000000"], 0x68}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000480)={'erspan0\x00', r9, 0x700, 0x1, 0x1, 0x64d1, {{0x11, 0x4, 0x1, 0x27, 0x44, 0x66, 0x0, 0x3, 0x4, 0x0, @loopback, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x91, 0x3, 0x7, [{@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x6}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x8000}]}, @ssrr={0x89, 0x13, 0x58, [@remote, @rand_addr=0x64010101, @remote, @remote]}]}}}}}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x401, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x401}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0xffffffffffffffff}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000)={r4, 0x4c, "c34880307cec82e3d93be9ab8ab82dc379ed4c9adc57d84370a380fe2167ee682a03629a530dc162cdbf6020378351815221ca66d53de0d5f6b346d4ce9b00644bc9beaebcf691584be2bc97"}, &(0x7f0000000080)=0x54) 12:17:47 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) [ 3257.803769] sctp: [Deprecated]: syz-executor.3 (pid 8922) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3257.803769] Use struct sctp_sack_info instead [ 3257.929368] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3257.948517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=511 sclass=netlink_route_socket pid=8965 comm=syz-executor.3 [ 3258.008472] sctp: [Deprecated]: syz-executor.3 (pid 8960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3258.008472] Use struct sctp_sack_info instead [ 3258.009900] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3258.033201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=511 sclass=netlink_route_socket pid=8960 comm=syz-executor.3 12:17:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000000)=0x3) sendfile(r1, r2, 0x0, 0xffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) 12:17:48 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xfeff) 12:17:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x60000000}, 0x0) 12:17:48 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7a4, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:48 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:48 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x40, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0x0, 0x0]}, @md5sig={0x13, 0x12, "457a5ef5bb8614c2725690c765dc45ee"}, @mptcp=@synack={0x1e, 0x10}]}}}}}}}}, 0x0) 12:17:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x2b, 0x0, @local, @local, {[@hopopts={0x11}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) [ 3258.456452] validate_nla: 6 callbacks suppressed [ 3258.456462] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:48 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xff0f) [ 3258.488284] audit: type=1804 audit(1596370668.432:6556): pid=8983 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16849 res=1 12:17:48 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:48 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xfffe) 12:17:48 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7a5, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:48 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) [ 3258.722765] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:49 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000000)=0x3) sendfile(r1, r2, 0x0, 0xffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) 12:17:49 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x34000) 12:17:49 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x178, 0x0, 0xd0e0000, 0x0, 0x100, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xff000000, 0x0, 'veth0_macvtap\x00', '\x00', {}, {}, 0x1}, 0x0, 0x150, 0x178, 0x0, {0x8800000000000000}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "a7a9"}}, @common=@unspec=@conntrack1={{0xb8, 'conntrack\x00'}, {{@ipv4=@loopback=0x7f008800, [], @ipv4=@multicast1, [], @ipv6=@dev, [], @ipv6=@remote, [0x0, 0x0, 0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x11}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 12:17:49 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:49 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7a6, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x60010000}, 0x0) [ 3259.356314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3259.379138] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:49 executing program 3: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x2}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xcdf50763, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020314af00031400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}]) 12:17:49 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x400300) [ 3259.392961] audit: type=1804 audit(1596370669.342:6557): pid=9042 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16787 res=1 12:17:49 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7a7, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:49 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:49 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rt_sigprocmask(0x0, &(0x7f00000000c0), 0x0, 0x8) 12:17:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x74, &(0x7f0000000440)="c4c691019919da070000000000000022addee07bee6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e293a000000000000000808ffdb2dc4a741357baa16dacdcf7d8f6990c3f9c51808235ffcabe1ed39b22837a6e1ce0f81d16f6c0be1d57c58b9959408a37819"}}], 0x1c) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/12, 0xc}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 3259.749897] bond2408: making interface veth8027 the new active one [ 3259.758696] bond2408: Enslaving veth8027 as an active interface with an up link [ 3259.773348] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3259.858584] bond2408: Enslaving veth8029 as a backup interface with an up link 12:17:50 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000000)=0x3) sendfile(r1, r2, 0x0, 0xffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) 12:17:50 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7a8, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:50 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xf0ffff) 12:17:50 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x65580000}, 0x0) [ 3260.260780] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3260.284722] audit: type=1804 audit(1596370670.232:6558): pid=9129 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16950 res=1 12:17:50 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x1000000) 12:17:50 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:50 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7a9, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:50 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:50 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x2000000) 12:17:50 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) [ 3260.633014] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0) 12:17:52 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:52 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7aa, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x68000000}, 0x0) 12:17:52 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x3000000) 12:17:52 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000000)=0x3) sendfile(r1, r2, 0x0, 0xffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:17:52 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) [ 3262.748001] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3262.767601] audit: type=1804 audit(1596370672.712:6559): pid=9189 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16994 res=1 12:17:52 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x4000000) 12:17:52 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7ab, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:52 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:52 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:52 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:53 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x72, &(0x7f0000000440)="c4c691019919da070000000000000022addee07bee6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e293a000000000000000808ffdb2dc4a741357baa16dacdcf7d8f6990c3f9c51808235ffcabe1ed39b22837a6e1ce0f81d16f6c0be1d57c58b9959408a3"}}], 0x1c) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/12, 0xc}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:17:53 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7ac, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:53 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x5000000) 12:17:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x6c000000}, 0x0) 12:17:53 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) [ 3263.211942] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3263.305711] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3263.436503] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:53 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000000)=0x3) sendfile(r1, r2, 0x0, 0xffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:17:53 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7ad, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:53 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) 12:17:53 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x6000000) 12:17:53 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 12:17:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x722c8588}, 0x0) [ 3263.620206] audit: type=1804 audit(1596370673.562:6560): pid=9271 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16365 res=1 12:17:53 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x7000000) [ 3263.680589] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:53 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) stat(0x0, 0x0) 12:17:53 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 12:17:53 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7ae, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:53 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 12:17:53 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) [ 3263.969123] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:54 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000000)=0x3) sendfile(r1, r2, 0x0, 0xffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:17:54 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 12:17:54 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7af, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:54 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = getpid() r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r2 = dup(r1) ioctl$CHAR_RAW_FLSBUF(r2, 0x1261, 0x0) perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0x4, 0x81, 0x9, 0x1, 0x0, 0xdd6, 0x10000, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x81, 0x3, 0x1, 0x6389, 0x3ff}, r0, 0xb, r2, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x24c00, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) 12:17:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x74000000}, 0x0) 12:17:54 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x8000000) 12:17:54 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 12:17:54 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xa000000) [ 3264.547611] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3264.548340] audit: type=1804 audit(1596370674.492:6561): pid=9369 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17186 res=1 12:17:54 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7b0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:54 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = getpid() r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r2 = dup(r1) ioctl$CHAR_RAW_FLSBUF(r2, 0x1261, 0x0) perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0x4, 0x81, 0x9, 0x1, 0x0, 0xdd6, 0x10000, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x81, 0x3, 0x1, 0x6389, 0x3ff}, r0, 0xb, r2, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x24c00, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) 12:17:54 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 3264.726942] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:54 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 12:17:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000000)=0x3) sendfile(r1, r2, 0x0, 0xffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 12:17:55 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7b1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:55 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = getpid() r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r2 = dup(r1) ioctl$CHAR_RAW_FLSBUF(r2, 0x1261, 0x0) perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0x4, 0x81, 0x9, 0x1, 0x0, 0xdd6, 0x10000, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x81, 0x3, 0x1, 0x6389, 0x3ff}, r0, 0xb, r2, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x24c00, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) 12:17:55 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xc000000) 12:17:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x78020000}, 0x0) 12:17:55 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 12:17:55 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) [ 3265.446923] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3265.467114] audit: type=1804 audit(1596370675.412:6562): pid=9423 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17330 res=1 12:17:55 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:55 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7b2, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:55 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:55 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xe000000) 12:17:55 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = getpid() r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r2 = dup(r1) ioctl$CHAR_RAW_FLSBUF(r2, 0x1261, 0x0) perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0x4, 0x81, 0x9, 0x1, 0x0, 0xdd6, 0x10000, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x81, 0x3, 0x1, 0x6389, 0x3ff}, r0, 0xb, r2, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x24c00, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) [ 3265.838457] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:56 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000000)=0x3) sendfile(r1, r2, 0x0, 0xffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 12:17:56 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:56 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7b3, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:56 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = getpid() r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r2 = dup(r1) ioctl$CHAR_RAW_FLSBUF(r2, 0x1261, 0x0) perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0x4, 0x81, 0x9, 0x1, 0x0, 0xdd6, 0x10000, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x81, 0x3, 0x1, 0x6389, 0x3ff}, r0, 0xb, r2, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x24c00, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) 12:17:56 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xf000000) 12:17:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x7a000000}, 0x0) 12:17:56 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:56 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = getpid() r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r2 = dup(r1) ioctl$CHAR_RAW_FLSBUF(r2, 0x1261, 0x0) perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0x4, 0x81, 0x9, 0x1, 0x0, 0xdd6, 0x10000, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x81, 0x3, 0x1, 0x6389, 0x3ff}, r0, 0xb, r2, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) [ 3266.367390] audit: type=1804 audit(1596370676.312:6563): pid=9478 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17362 res=1 [ 3266.386518] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:56 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7b4, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:56 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:56 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x10000000) 12:17:56 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = getpid() r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r2 = dup(r1) ioctl$CHAR_RAW_FLSBUF(r2, 0x1261, 0x0) perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0x4, 0x81, 0x9, 0x1, 0x0, 0xdd6, 0x10000, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x81, 0x3, 0x1, 0x6389, 0x3ff}, r0, 0xb, r2, 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) [ 3266.606372] bond2410: making interface veth8037 the new active one [ 3266.619182] bond2410: Enslaving veth8037 as an active interface with an up link [ 3266.637539] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3266.769698] bond2410: Enslaving veth8039 as a backup interface with an up link 12:17:57 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000000)=0x3) sendfile(r1, r2, 0x0, 0xffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 12:17:57 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:57 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x2d3a0000) 12:17:57 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7b5, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:57 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = getpid() r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r2 = dup(r1) ioctl$CHAR_RAW_FLSBUF(r2, 0x1261, 0x0) perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0x4, 0x81, 0x9, 0x1, 0x0, 0xdd6, 0x10000, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x81, 0x3, 0x1, 0x6389, 0x3ff}, r0, 0xb, r2, 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) 12:17:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x7ed971b6}, 0x0) [ 3267.209732] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:57 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = getpid() r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r2 = dup(r1) ioctl$CHAR_RAW_FLSBUF(r2, 0x1261, 0x0) perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0x4, 0x81, 0x9, 0x1, 0x0, 0xdd6, 0x10000, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x81, 0x3, 0x1, 0x6389, 0x3ff}, r0, 0xb, r2, 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) [ 3267.285189] audit: type=1804 audit(1596370677.232:6564): pid=9565 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17554 res=1 12:17:57 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7b6, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:57 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') getpid() r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r1 = dup(r0) ioctl$CHAR_RAW_FLSBUF(r1, 0x1261, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) [ 3267.462245] bond2411: making interface veth8041 the new active one [ 3267.476101] bond2411: Enslaving veth8041 as an active interface with an up link 12:17:57 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) [ 3267.503571] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:57 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7b7, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:57 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x40000000) [ 3267.638617] bond2411: Enslaving veth8043 as a backup interface with an up link 12:17:58 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000000)=0x3) sendfile(r1, r2, 0x0, 0xffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 12:17:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x81000000}, 0x0) 12:17:58 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') getpid() r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r1 = dup(r0) ioctl$CHAR_RAW_FLSBUF(r1, 0x1261, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) 12:17:58 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:58 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x57000000) 12:17:58 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7b8, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:58 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x60000000) 12:17:58 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') getpid() r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) [ 3268.256926] audit: type=1804 audit(1596370678.202:6565): pid=9652 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17522 res=1 12:17:58 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7b9, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:58 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:58 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x65580000) 12:17:58 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') getpid() openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) 12:17:59 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:59 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7ba, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x87800000}, 0x0) 12:17:59 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x81000000) 12:17:59 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') getpid() openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) 12:17:59 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000000)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 3269.130707] validate_nla: 2 callbacks suppressed [ 3269.130716] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:59 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x88a8ffff) [ 3269.190461] audit: type=1804 audit(1596370679.132:6566): pid=9708 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17777 res=1 12:17:59 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x9effffff) 12:17:59 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x2, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:17:59 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7bb, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:59 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xf0ffffff) 12:17:59 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) 12:17:59 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xfe0f0000) 12:17:59 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xfeff0000) [ 3269.478026] bond2412: making interface veth8047 the new active one [ 3269.492870] bond2412: Enslaving veth8047 as an active interface with an up link [ 3269.517563] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:17:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x88852c72}, 0x0) 12:17:59 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xff0f0000) 12:17:59 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7bc, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3269.630470] bond2412: Enslaving veth8049 as a backup interface with an up link [ 3269.673651] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3269.828268] bond2413: making interface veth8051 the new active one [ 3269.837199] bond2413: Enslaving veth8051 as an active interface with an up link [ 3269.848461] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3269.925232] bond2413: Enslaving veth8053 as a backup interface with an up link 12:17:59 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 12:17:59 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) 12:17:59 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xffffa888) 12:17:59 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7bd, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:17:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x88a8ffff}, 0x0) 12:18:00 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 12:18:00 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) 12:18:00 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xfffff000) [ 3270.119498] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:00 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 3270.152954] audit: type=1804 audit(1596370680.102:6567): pid=9853 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16271 res=1 12:18:00 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7be, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:00 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xffffff7f) 12:18:00 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xffffff9e) 12:18:00 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7bf, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:00 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xfffffff0) 12:18:00 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 12:18:00 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) [ 3270.419216] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x8a020000}, 0x0) [ 3270.678674] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3270.785556] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:00 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 12:18:00 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x40030000000000) 12:18:00 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7c0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:00 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) 12:18:00 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x0, 0x8001, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:18:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x905b0300}, 0x0) [ 3271.034257] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3271.061993] audit: type=1804 audit(1596370681.012:6568): pid=9975 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16415 res=1 12:18:01 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) 12:18:01 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7c1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:01 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xf0ffffffffffff) [ 3271.161925] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 12:18:01 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x0, 0x0, 0x3, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) [ 3271.209523] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:01 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x100000000000000) 12:18:01 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) [ 3271.377717] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 12:18:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) 12:18:01 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x200000000000000) 12:18:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x915b0300}, 0x0) 12:18:01 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7c2, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 12:18:01 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{0x0, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:18:01 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) 12:18:01 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x300000000000000) [ 3271.966098] audit: type=1804 audit(1596370681.912:6569): pid=10031 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16990 res=1 12:18:01 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) 12:18:02 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32, @ANYBLOB="932a1355279d05c744e632eaea995103f330ef43e94095738e8ff8933c466d5529dfd6a3f8e5507c8b0f0f099ba41e99891e886f3296447fb2dee77cd37768f0f032e0dd39ac442c6226835db1654b551d6a7f1af521a6ad82d2cb3565"], 0x54}}, 0x0) 12:18:02 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7c3, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3272.094497] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 12:18:02 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x128, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf8, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x25, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x401, 0x43}}]}}}]}, 0x128}}, 0x0) 12:18:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 12:18:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 3272.332100] bond2415: making interface veth8057 the new active one [ 3272.341016] bond2415: Enslaving veth8057 as an active interface with an up link [ 3272.350382] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 12:18:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x925b0300}, 0x0) 12:18:02 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7c4, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3272.453200] bond2415: Enslaving veth8059 as a backup interface with an up link [ 3272.648187] bond2416: making interface veth8061 the new active one [ 3272.656909] bond2416: Enslaving veth8061 as an active interface with an up link [ 3272.740423] bond2416: Enslaving veth8063 as a backup interface with an up link 12:18:02 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x11c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xec, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x14, 0x6, {0x6, 0x0, 0x1000, 0x5}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x81, 0x20, 0x400000, 0x56}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e381738, 0x3, 0x5, 0x0, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x40, 0x8}}]}]}}}]}, 0x11c}}, 0x0) 12:18:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 12:18:02 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x400000000000000) 12:18:02 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7c5, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x935b0300}, 0x0) 12:18:02 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 12:18:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 12:18:02 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xd4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xa4, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x14, 0x6, {0x6, 0x0, 0x1000, 0x5}}]}}}]}, 0xd4}}, 0x0) [ 3272.867005] audit: type=1804 audit(1596370682.812:6570): pid=10167 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16972 res=1 12:18:02 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x500000000000000) 12:18:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 12:18:02 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7c6, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 12:18:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) 12:18:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) 12:18:03 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7c7, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3273.166816] bond2417: making interface veth8065 the new active one [ 3273.175554] bond2417: Enslaving veth8065 as an active interface with an up link 12:18:03 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xc0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x90, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}]}}}]}, 0xc0}}, 0x0) 12:18:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x945b0300}, 0x0) [ 3273.337232] bond2417: Enslaving veth8067 as a backup interface with an up link 12:18:03 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 12:18:03 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x600000000000000) 12:18:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) 12:18:03 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xc0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x90, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}]}}}]}, 0xc0}}, 0x0) 12:18:03 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7c8, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x955b0300}, 0x0) 12:18:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) 12:18:03 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xc0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x90, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}]}}}]}, 0xc0}}, 0x0) [ 3273.767388] audit: type=1804 audit(1596370683.712:6571): pid=10282 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16987 res=1 12:18:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300"], 0x54}}, 0x0) 12:18:03 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x700000000000000) 12:18:03 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7c9, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:03 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xd4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xa4, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x1000, 0x5}}]}}}]}, 0xd4}}, 0x0) 12:18:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x965b0300}, 0x0) 12:18:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300"], 0x54}}, 0x0) 12:18:04 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x800000000000000) 12:18:04 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xd4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xa4, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x0, 0x5}}]}}}]}, 0xd4}}, 0x0) 12:18:04 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7ca, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:04 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xa00000000000000) [ 3274.619132] validate_nla: 10 callbacks suppressed [ 3274.619141] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300"], 0x54}}, 0x0) 12:18:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:04 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xd4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xa4, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x0, 0x5}}]}}}]}, 0xd4}}, 0x0) 12:18:04 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7cb, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYRES32], 0x54}}, 0x0) 12:18:04 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xd4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xa4, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x0, 0x5}}]}}}]}, 0xd4}}, 0x0) [ 3274.860462] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x975b0300}, 0x0) 12:18:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:04 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xc00000000000000) 12:18:04 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7cc, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYRES32], 0x54}}, 0x0) [ 3274.946899] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 12:18:05 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xd4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xa4, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x1000}}]}}}]}, 0xd4}}, 0x0) 12:18:05 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xe00000000000000) 12:18:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 12:18:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYRES32], 0x54}}, 0x0) [ 3275.078082] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3275.105556] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3275.143663] audit: type=1804 audit(1596370685.092:6572): pid=10400 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16968 res=1 12:18:05 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xcc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x9c, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x1000}}]}}}]}, 0xcc}}, 0x0) 12:18:05 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7cd, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3275.322732] bond2418: making interface veth8069 the new active one [ 3275.331665] bond2418: Enslaving veth8069 as an active interface with an up link [ 3275.339174] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 12:18:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x54}}, 0x0) [ 3275.371879] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 12:18:05 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7ce, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:05 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xf00000000000000) 12:18:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x985b0300}, 0x0) 12:18:05 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xcc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x9c, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_RATE={0x14}]}}}]}, 0xcc}}, 0x0) [ 3275.472972] bond2418: Enslaving veth8071 as a backup interface with an up link [ 3275.480513] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 12:18:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x54}}, 0x0) 12:18:05 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x1000000000000000) [ 3275.546202] audit: type=1804 audit(1596370685.492:6573): pid=10465 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16991 res=1 12:18:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 12:18:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x54}}, 0x0) 12:18:05 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xcc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x9c, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_RATE={0x14}]}}}]}, 0xcc}}, 0x0) [ 3275.603247] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3275.614527] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:05 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7cf, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3275.686014] audit: type=1804 audit(1596370685.632:6574): pid=10478 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16429 res=1 12:18:05 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xcc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x9c, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x200, 0x80000000}}, @TCA_NETEM_RATE={0x14}]}}}]}, 0xcc}}, 0x0) [ 3275.776311] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 12:18:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 12:18:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c000280", @ANYRES32], 0x54}}, 0x0) 12:18:05 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x2d3a000000000000) [ 3275.907393] audit: type=1804 audit(1596370685.852:6575): pid=10505 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16988 res=1 [ 3275.956450] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x995b0300}, 0x0) 12:18:05 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7d0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c000280", @ANYRES32], 0x54}}, 0x0) 12:18:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 12:18:05 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x4000000000000000) 12:18:05 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x8c, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x1000}}]}}}]}, 0xbc}}, 0x0) 12:18:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c000280", @ANYRES32], 0x54}}, 0x0) 12:18:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 12:18:06 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x8c, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x1000}}]}}}]}, 0xbc}}, 0x0) 12:18:06 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x5700000000000000) [ 3276.091319] audit: type=1804 audit(1596370686.032:6576): pid=10527 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17382 res=1 [ 3276.128994] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3276.199538] audit: type=1804 audit(1596370686.142:6577): pid=10543 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17382 res=1 12:18:06 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7d1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3276.242488] nla_parse: 4 callbacks suppressed [ 3276.242493] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3276.258130] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:18:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800020004000000080001000000", @ANYRES32], 0x54}}, 0x0) [ 3276.392255] bond2419: making interface veth8073 the new active one [ 3276.400655] bond2419: Enslaving veth8073 as an active interface with an up link [ 3276.413064] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3276.438167] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3276.456513] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x9a5b0300}, 0x0) 12:18:06 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x8c, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x1000}}]}}}]}, 0xbc}}, 0x0) 12:18:06 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7d2, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 12:18:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800020004000000080001000000", @ANYRES32], 0x54}}, 0x0) 12:18:06 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x6000000000000000) [ 3276.556920] bond2419: Enslaving veth8075 as a backup interface with an up link [ 3276.600837] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3276.626439] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 12:18:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800020004000000080001000000", @ANYRES32], 0x54}}, 0x0) 12:18:06 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xcc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x9c, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x200, 0x80000000}}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x1000}}]}}}]}, 0xcc}}, 0x0) [ 3276.648553] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3276.658108] audit: type=1804 audit(1596370686.592:6578): pid=10611 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17382 res=1 12:18:06 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7d3, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:06 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x6558000000000000) 12:18:06 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7d4, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3276.948596] bond2420: making interface veth8077 the new active one [ 3276.967865] bond2420: Enslaving veth8077 as an active interface with an up link [ 3276.987629] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 12:18:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c000280080002000400000008000100000000000800010004", @ANYRES32], 0x54}}, 0x0) [ 3277.011528] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3277.040181] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3277.207491] bond2420: Enslaving veth8079 as a backup interface with an up link [ 3277.218788] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 12:18:07 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xcc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x9c, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x0, 0x80000000}}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x1000}}]}}}]}, 0xcc}}, 0x0) 12:18:07 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7d5, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x9b5b0300}, 0x0) 12:18:07 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 12:18:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c000280080002000400000008000100000000000800010004", @ANYRES32], 0x54}}, 0x0) 12:18:07 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x8100000000000000) 12:18:07 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xcc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x9c, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x1000}}]}}}]}, 0xcc}}, 0x0) 12:18:07 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7d6, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3277.534498] bond2421: making interface veth8081 the new active one [ 3277.550901] bond2421: Enslaving veth8081 as an active interface with an up link [ 3277.561907] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 12:18:07 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7d7, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c000280080002000400000008000100000000000800010004", @ANYRES32], 0x54}}, 0x0) 12:18:07 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0xc0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x90, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_DELAY_DIST={0x35, 0x2, "2994e7c0f3e024e1c82037ce93f798f7f5236dac93cc48e7e0622260ed7b3414b76c8fa99558261c94d7f30ae4286e3055"}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x1000}}]}}}]}, 0xc0}}, 0x0) [ 3277.610280] audit: type=1804 audit(1596370687.552:6579): pid=10748 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17382 res=1 12:18:07 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x88a8ffff00000000) [ 3277.759705] bond2421: Enslaving veth8083 as a backup interface with an up link 12:18:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008", @ANYRES32], 0x54}}, 0x0) 12:18:07 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7d8, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x9c5b0300}, 0x0) [ 3278.154574] bond2422: making interface veth8085 the new active one [ 3278.166654] bond2422: Enslaving veth8085 as an active interface with an up link [ 3278.296002] bond2422: Enslaving veth8087 as a backup interface with an up link 12:18:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 12:18:08 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x58, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x1000}}]}}}]}, 0x88}}, 0x0) 12:18:08 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x9effffff00000000) 12:18:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008", @ANYRES32], 0x54}}, 0x0) 12:18:08 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7d9, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x9d5b0300}, 0x0) 12:18:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008", @ANYRES32], 0x54}}, 0x0) 12:18:08 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x4c, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf6e2524422966f6b}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x1000}}]}}}]}, 0x7c}}, 0x0) 12:18:08 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7da, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3278.703868] audit: type=1804 audit(1596370688.652:6580): pid=10889 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17828 res=1 [ 3278.786295] bond2423: making interface veth8089 the new active one [ 3278.797417] bond2423: Enslaving veth8089 as an active interface with an up link 12:18:08 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xf0ffffff00000000) 12:18:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c000280080002000400000008000100000000000800010004000000080003", @ANYRES32], 0x54}}, 0x0) 12:18:08 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7db, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3279.011323] bond2423: Enslaving veth8091 as a backup interface with an up link 12:18:09 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:09 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x40, 0x2, {{}, [@TCA_NETEM_CORR={0x10}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x1000}}]}}}]}, 0x70}}, 0x0) 12:18:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x9e5b0300}, 0x0) 12:18:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c000280080002000400000008000100000000000800010004000000080003", @ANYRES32], 0x54}}, 0x0) 12:18:09 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xfe0f000000000000) 12:18:09 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7dc, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c000280080002000400000008000100000000000800010004000000080003", @ANYRES32], 0x54}}, 0x0) 12:18:09 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x0) 12:18:09 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7dd, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:09 executing program 2: 12:18:09 executing program 2: 12:18:09 executing program 2: [ 3279.892757] bond2424: making interface veth8093 the new active one [ 3279.902324] bond2424: Enslaving veth8093 as an active interface with an up link 12:18:09 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:09 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xfeff000000000000) [ 3279.945477] validate_nla: 7 callbacks suppressed [ 3279.945486] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x9effffff}, 0x0) 12:18:10 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7de, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) 12:18:10 executing program 2: 12:18:10 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 3280.067778] bond2424: Enslaving veth8095 as a backup interface with an up link 12:18:10 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xff0f000000000000) 12:18:10 executing program 2: 12:18:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) 12:18:10 executing program 2: [ 3280.179328] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:10 executing program 2: 12:18:10 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:10 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7df, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3280.407770] audit: type=1804 audit(1596370690.352:6581): pid=11053 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16300 res=1 [ 3280.438537] bond2425: making interface veth8097 the new active one [ 3280.450885] bond2425: Enslaving veth8097 as an active interface with an up link 12:18:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x9f5b0300}, 0x0) 12:18:10 executing program 2: 12:18:10 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xffffff7f00000000) 12:18:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) 12:18:10 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7e0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3280.550500] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:10 executing program 2: 12:18:10 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0xfffffffffffff000) 12:18:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) [ 3280.680310] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:10 executing program 2: 12:18:10 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000000)=0x7) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000304000000000000000000000000e2fa1397945a00d6e201425b7ac024a127fd8ab076cb432a2b20b2359c2a71143e835d8cd2976de47128f5a0992d78c7", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0xf000000}, 0x0) [ 3280.955865] bond2426: making interface veth8101 the new active one [ 3280.965044] bond2426: Enslaving veth8101 as an active interface with an up link [ 3280.976829] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3281.064180] bond2426: Enslaving veth8103 as a backup interface with an up link 12:18:11 executing program 2: 12:18:11 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7e1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) 12:18:11 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x3, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x1}, {0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x2}}], 0x20) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000180)={'ip6gre0\x00', r2, 0x29, 0x9, 0x52, 0x0, 0x78, @loopback, @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x7800, 0x4, 0x6}}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x40}, 0x1, 0xf000000, 0x0, 0x4008010}, 0x0) 12:18:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xa05b0300}, 0x0) 12:18:11 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:11 executing program 2: 12:18:11 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = gettid() tkill(r3, 0x31) r4 = gettid() tkill(r4, 0x31) r5 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) r6 = getpgrp(0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@RTM_GETNSID={0x64, 0x5a, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NETNSA_PID={0x8, 0x2, r3}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8}, @NETNSA_FD={0x8, 0x3, r5}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_PID={0x8, 0x2, r6}]}, 0x64}, 0x1, 0xf000000}, 0x0) 12:18:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) [ 3281.300219] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3281.307328] audit: type=1804 audit(1596370691.242:6582): pid=11149 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17847 res=1 12:18:11 executing program 2: 12:18:11 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7e2, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:11 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket(0x1, 0x803, 0x0) sendto$ax25(r0, &(0x7f0000000000)="4c1b9d53222585f7db76f7", 0xb, 0x40, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @bcast, @null]}, 0x48) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:11 executing program 2: 12:18:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) 12:18:11 executing program 2: 12:18:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) [ 3281.782840] bond2427: making interface veth8105 the new active one [ 3281.795806] bond2427: Enslaving veth8105 as an active interface with an up link 12:18:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xa15b0300}, 0x0) [ 3281.872349] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3281.930931] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3282.046270] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:12 executing program 1: r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:12 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7e3, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:12 executing program 2: 12:18:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) 12:18:12 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2000000}) fstat(r2, &(0x7f0000000640)) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000180)=""/84, &(0x7f0000000040)=0x54) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x0) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) 12:18:12 executing program 2: 12:18:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000100001040100", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) 12:18:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xa25b0300}, 0x0) 12:18:12 executing program 1: r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:12 executing program 2: [ 3282.310607] nla_parse: 8 callbacks suppressed [ 3282.310618] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3282.335181] IPVS: length: 84 != 24 [ 3282.348317] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:12 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7e4, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000100001040100", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) 12:18:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="1a00387164b650000000000008020000f8db00000000000000007f46f3b54d8bc604c0f027cb4b1ae5a009056827f900ef9f36b1eb4290e103d2a1e9604a2429ae6d"]}) 12:18:12 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x2}, {@any, "f901008d4ea7a8c140286d5cd99400", 0x5}}}, 0x1a) 12:18:12 executing program 1: r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:12 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7e5, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3282.546344] IPVS: length: 84 != 24 12:18:12 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x3, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:12 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, "175fa650758adf38412ee6bf023966651dbccf30cbb436ca427bfc9bc9f178129190f2b464c6e609c2973e257177417e02a6c1c16cf8bceef200ae9fca72d7a9c6cf812c122bb90222f125aadc4d7e1bf57a51e8a89f2fc6100781c3dd4dbc57f500676c94c8619416835437b2a7c8947e8b63d65768912757efa02506d49781be1ba6284a700c3659d318f7f09028e38bdd393952a67814c4d7be9712090f422fa2fece50ace0f0e8e8edf73f57ca6aa9f1476a69bbd1805cde2931707d341d80435e94e9cea1f5aaef33568cc90063cbc0cda6f74b4c271766a9be6f6842658e7d41e493dad639ecda0766"}, 0xed) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0x1, 0x8, "711c63", 0xffff, 0x3, "3f9660e0b08cd8a654f66a18aefe272b00647ce8dac55822ce9948fda0e78d33025e91184fcf78b21e1fadf576a06f4b0b593b700afad4c3f0d919918b1fc40e39a2cb7acc7bb4c67642679033b7492d2e5e509ecad34a4b0fb54b1e2de016d2c988341d23d67b354628c8c09805fa148dd68c621082960d93d2ca4570cf8ea5fd7ff4a0b311961abd80db5b38e18fc7fb9875640bfcb0d04181cbc20e5e0f2dc6b8c1c6563c7b427c99103d5f914c20c086736f78cf1be2f8218c4b4e8d0775240e5d8092bf597ae8bf23a204183534464e43ba02702c9bc6474d4cfd7bfabcc7c7f41d087d64af8df4b9803f897b59"}]}}}, 0x102) [ 3282.676348] bond2429: making interface veth8111 the new active one [ 3282.685237] bond2429: Enslaving veth8111 as an active interface with an up link [ 3282.693315] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 12:18:12 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 3282.834259] audit: type=1804 audit(1596370692.782:6583): pid=11380 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17847 res=1 12:18:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xa35b0300}, 0x0) 12:18:12 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7e6, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000100001040100", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) 12:18:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @ifru_flags=0x1}) 12:18:12 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x0) r3 = gettid() tkill(r3, 0x31) sendmsg$AUDIT_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x3e9, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x1, 0x1, r3, 0x8, 0x1f, 0x21ce, 0x9, 0x0, 0x8}, ["", "", ""]}, 0x38}}, 0x4) 12:18:13 executing program 2: [ 3283.026505] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 12:18:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) 12:18:13 executing program 2: 12:18:13 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7e7, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:13 executing program 2: syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed}}}, 0x14) 12:18:13 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100003040000000000001400000000002d79fe8d52814e4d1f946bf05b29ecb43274b1671939ace89a7dca99769cca44ee1284aa1962cd4d7c6c98a8f7f078a35e09c7", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0xf000000}, 0x0) [ 3283.457097] bond2430: making interface veth8115 the new active one [ 3283.468731] bond2430: Enslaving veth8115 as an active interface with an up link [ 3283.482124] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3283.494886] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 12:18:13 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 3283.609295] bond2430: Enslaving veth8117 as a backup interface with an up link [ 3283.617245] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 12:18:13 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x6}, 0x8) 12:18:13 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7e8, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:13 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu}) 12:18:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) 12:18:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xa45b0300}, 0x0) 12:18:13 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 12:18:13 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @none, 0x1}}}, 0xe) 12:18:13 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7e9, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3283.860374] audit: type=1804 audit(1596370693.802:6584): pid=11482 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17866 res=1 12:18:13 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a0, &(0x7f0000000040)={'sit0\x00', @ifru_mtu=0x1dfba}) 12:18:13 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2000000}) fstat(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f0000000280)='./file0\x00', 0xfffffffffffffacf, 0x6, &(0x7f0000000580)=[{&(0x7f00000002c0)="77485729a01fe4cbe99648139d4e85fa82", 0x11, 0x58c}, {&(0x7f0000000300)="8217a3d5dcc27bce2477a0fdcab6b2a37de877cf2d69efe6dd8abb2369c27372fa76aa738b19e82201fd6ddf5ab9adc8046097ab74dbf5db727485b13efd1d15c452f2fcfa0cce48b362d937beda5e6519d5c82be58d2c4b57e28494f76f228b4683079b04c7bcadbfdd645e5bf55b3068620000d7", 0x75, 0x9}, {&(0x7f0000000380)="b5449f27e1920d00cf8f6c9e205fb15aa716718c1e8dcc83678c235658e5b56372610b90eaf68d66b610b6b1a7a919c2f24540de4570606c491e1b2364b7b9a13a0b0d63a2574ee383714d9ed0e1db4bb8b15e1548b09f955285733461273522097f", 0x62, 0x1}, {&(0x7f0000000400)="9faddcfd785c0c8bc2a72f90f228731a1c1a4009b8879fefe104445013b24109202b22ddbd4872eb", 0x28, 0x3}, {&(0x7f0000000440)="f0bf815e314e3e7d48b3cc304a96cd311beaaf5b94", 0x15, 0x57}, {&(0x7f0000000480)="5947f5f8ceccd7686549d074d59ecead07d7250ee1a9cb3649167a52f5eec69ca32b76d99aec96cfb042e3488d6bebfd05b5363d9ce204c7eef066688cc421668ec16d12f5ade6fe9002abacbda6fac152080b33d75ab2791419f4567ed17dcf820e3aa77ae4dd24dbe7786c3cb9b6cd646b39ca6b8feb4f02ca7c90390ae48d7a06d5bec1d397513994789849fb1604d214967e98061ee05dbf132b2f45c2de1985f2f66bfb5a999f9abf08dde2040a6e294ad84abc6252fe94f6413d2d54b5637727b8c8fa8ef89cd1647f1f4e5ebe15050fb1c12f566af41f6bc4733d0f368c721db9bc66226f87e81f40c57e8cfffb2243f0fe30c902eeea31c2e6", 0xfd, 0x2}], 0x100000, &(0x7f00000006c0)=ANY=[@ANYBLOB="0700000033cfa72d33c998d7784ae20de3999b47", @ANYRESHEX=r4, @ANYBLOB="2c646d6f64653d3078303030303030303037666666666666662c736d61636b6673726f6f743d2f6465762f76637375002c736d61636b6673666c6f6f723d520972757374e363757367725665783a44652c00"]) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="0d000000008000001c00128009000100766c616e000000010000000000000066e5bbb4ce1bb61508dd859a08f44085f7047d4bd3f37743cd1edbee6da635d3a6c442f68e42b2f021a4a2fd87939f1b67c2364656a4220c0ff05508fec10fc834854e9c71329b91f42d4f0eed7157b0dbcbf6e0b7d4ac0825d5fedb3c7d251500c0a25026324ad91777eb83ef8e490a422b78f6637f97368198838f3af83a389ad2dc81578b", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0xf000000}, 0x0) [ 3283.973821] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 12:18:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) [ 3284.288199] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 12:18:14 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:14 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0xe6, 0x8}, {0x0, 0x81}}]}}, 0x15) 12:18:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xa55b0300}, 0x0) 12:18:14 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7ea, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf250000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) 12:18:14 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x4004444) [ 3284.725742] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 12:18:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf250000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) 12:18:14 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x50200, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:14 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000040)={'sit0\x00', @ifru_flags}) 12:18:14 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7eb, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:14 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000340)) 12:18:14 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0xc0189436, &(0x7f0000000140)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_pauseparam}) [ 3285.006561] audit: type=1804 audit(1596370694.952:6585): pid=11587 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17865 res=1 [ 3285.088003] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3285.141388] validate_nla: 6 callbacks suppressed [ 3285.141397] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:15 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:15 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x89a1, &(0x7f0000000240)={'veth1_to_bond\x00', @ifru_names}) 12:18:15 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7ec, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf250000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) 12:18:15 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x401}]}, 0x44}, 0x1, 0xf000000}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024000f05deffff3f07a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x38, 0x2, [@TCA_RSVP_ACT={0x34, 0x6, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0x10, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000d009065746800c49130e9b34f6147aa93dcf8dd00"/33], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024000f05deffff3f07a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x38, 0x2, [@TCA_RSVP_ACT={0x34, 0x6, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x68}}, 0x0) 12:18:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xa65b0300}, 0x0) 12:18:15 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'macvlan1\x00', @ifru_ivalue=0x3}) 12:18:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf25000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) [ 3285.893480] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:15 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x1, 0x9, 0x30, 0x3f, 0x5, 0x0, 0x8}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000100), 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x3f, 0x9, 0x401}) connect$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0xff, @fixed={[], 0x11}, 0x0, 0x1}, 0xe) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000240)={0x1f, 0xa6, @none, 0x3, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000000000)='xfrm0\x00') accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x80800) 12:18:16 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7ed, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:16 executing program 2: openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_pauseparam}) 12:18:16 executing program 4: pipe(&(0x7f0000000100)) socket(0x1, 0x803, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xfffffffffffffef9) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB="0acd3050dcdbdfb38f737bf470906bbea8ead3264a392a74f8b7"], 0x44}, 0x1, 0xf000000}, 0x0) [ 3286.253468] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3286.285868] audit: type=1804 audit(1596370696.232:6586): pid=11666 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16440 res=1 12:18:17 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:17 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB="f9c6b9c4b5fd08218ed86acb93bf6a7a73ebe48615ae0b4e2d7f46fa65e72762c825040cd1d0ef6aca7d9410b5952f7ccdd81938d4044983bc991730211441ecd6184a6ebe637ce9ac1b320f781395ea47e0f479afe3822023c05199ce39ccc6b18c1299848a14e5a054760e0f99664fe5f3b1dee96e4179f5dbd8f45c1176b11949d864d6"], 0x44}, 0x1, 0xf000000}, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') r6 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x74, r5, 0xfff0e8f2b1082867, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xe}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4048090) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x3, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000}, 0x40) 12:18:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf25000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) 12:18:17 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) 12:18:17 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7ee, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xa75b0300}, 0x0) 12:18:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf25000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32], 0x54}}, 0x0) 12:18:17 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) [ 3287.131372] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:17 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_ts_info}) 12:18:17 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) 12:18:17 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7ef, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:17 executing program 2: socket$bt_cmtp(0x1f, 0x3, 0x5) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x6, 0x8}}]}}, 0x15) [ 3287.401677] nla_parse: 5 callbacks suppressed [ 3287.401685] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3287.435587] audit: type=1804 audit(1596370697.382:6587): pid=11711 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16034 res=1 [ 3287.638878] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:18 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:18 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7f0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x5, &(0x7f0000000000)={0x0, 0x0}, 0x10) 12:18:18 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) 12:18:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xa85b0300}, 0x0) 12:18:18 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) 12:18:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x4, 0x0, "462fc0", 0x0, 0x5}) [ 3288.345710] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:18 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7f1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:18 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x80}}}, 0x6) 12:18:18 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000000)=@ethtool_dump={0x0, 0x40}}) [ 3288.470300] audit: type=1804 audit(1596370698.412:6588): pid=11742 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16049 res=1 12:18:18 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000240)=@ethtool_test={0x1a, 0x0, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0xffffffffffff0001]}}) 12:18:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000180)=@generic={0x2, 0x600000}) [ 3288.726454] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:19 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:19 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000000)=@ethtool_dump}) 12:18:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000001340)={0x1, &(0x7f0000001300)=[{}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000040)={0x0, 0x0}, 0x10) 12:18:19 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7f2, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:19 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000001780)={0x980000, 0xffffffff, 0x5, r1, 0x0, &(0x7f00000001c0)={0x9b0906, 0xffffffff, [], @value64=0x10001}}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') r7 = syz_open_dev$vcsu(&(0x7f00000017c0)='/dev/vcsu#\x00', 0x3f, 0x208c0) ioctl$SNDCTL_SEQ_GETINCOUNT(r7, 0x80045105, &(0x7f0000001800)) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000a}, 0xc, &(0x7f0000000180)={&(0x7f0000001840)=ANY=[@ANYBLOB="e800000026059a27eb20d1e199f7a15314a8647285f0cc2b05c2433eb4592f01b552d83e53bb6a7119e0f04e7a522cc122b6085a3453a953a5ccf2a5e229f84001134acbe725bcfc71b92b16b10b50", @ANYRES16=r6, @ANYBLOB="08354a0a8566df2a1125010000001800018014000200624dad4a0a726c6176655f310000000004000300ac00028014000180080001000600000008000100060000001c000180080001000800000008000100000ea039906d4d2867c9ae69730000000008000100000000004400018008000100080000000800010004000000080001000500000008000100080000000800010002000008000100010000000800010002000000080001000500000034000180080001000300000008009157a482c65790e2a476546a0a2efaebff0600000008000100060000000801010003000000"], 0xe8}, 0x1, 0x0, 0x0, 0x30}, 0xc000) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x1454, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0x120c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fc5}, @ETHTOOL_A_BITSET_VALUE={0xa1, 0x4, "fb9bb470bb6152fd190fc5d4cfac36b5eea4a2b265a7a9607495b0786ddb10d63bf3155774048fade13d6e92a9f44456caeef4b7459806853e3571d2040d56cc7b195e88512b3a0c90d218c0e2fe952df07270c4581206a1f2ca58b3e561b1fd68246d0459aa4f00b88ac95bc8fc5a6db1da1f7e1b7ec5adc2a29a00c2d809b957652dc067287256bbf48c5223b912c6a13d0a4629818e0ed5a4b7701a"}, @ETHTOOL_A_BITSET_VALUE={0x9f, 0x4, "b2343e183cc3f9bd689156dd635a2221cc0bae7eb439a54dda19659f193b1efab24d0901a049600902d3dbd2d7710fcf40e9d85ac3c0b28fd406ac0435311b11bc68fa593ae27c1e8db16cc0245e40a6e1233743738ef1dd1295097a27d2b4a63d347e915d343a22f1c6eaf3b3ec59926a85256f11db15ee962073ec18e6b28e5de18b516a0c04b8d75c9a5ead611c2472cb088e20bd099a1c6d75"}, @ETHTOOL_A_BITSET_VALUE={0x1f, 0x4, "ee560d9cd3b73841c460b1775ee06c401c53b804eca0f779de6c29"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_VALUE={0x84, 0x4, "1b0102fed61fa7bdd1efd536b6a635d974ce308cd8a6761ccd25aa6ae727bc6805dcc6804e89dc64253f41795686a93e9baa064f7014093fefae07b30b5f3cacaa7f1c7dd274367fa917096fc776d63dc91d38f9836eb3a770fbec201d980649551ca2a71550759a5eaef090f9919da24250a0cdad1840abb29feffb7a6fbc6a"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_WOL_SOPASS={0x4c, 0x3, "446163e21c1c898fdffb6df8a7cc67b92e2a19ab626f588592aea35aced0bc05af4e08f88e4718645dcff457db115e00ebc3f1e0997a00fdae0b6dca9d723a462e53a27a3ef5d76c"}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0xa1, 0x3, "70b5a872ad32d0b3a292d3c6a9ffb9c83ac2cb5301162e641236b50cb0550f36355ffeb05fd39372cf68f43732dc1528dfbf67950b4e92ed873621eb7f9f3a489d42e76cdca6228bdf62bb7fe1b81be98004ef07f395d2b7009f16cb4e136393f26b6d61041e4ecac9dd948af4482e73d7f3416b3a4223254778ab623385e12f4e2c14c9016fd3c1a6830b748490cc08ffe7a28055078cc288eec13f19"}, @ETHTOOL_A_WOL_SOPASS={0x8b, 0x3, "4a1923d9fa9daad5ce670334cca59b9d743ea5ee9445dd33d4dc6138aa1604125b812091cbe9f158afd2f0454a7b763c77c572666550a02a6b8adb64ebfb97a40e10a23b26ba03ad7a19fce97f87e682a759241f0ac10ad527f848772efef6a367f00be0668484f5b520b2889c2eaea733055305bf5cbe55e9041a65c9fdb249107ac81e91603a"}, @ETHTOOL_A_WOL_SOPASS={0x71, 0x3, "744c07a395cdf33c83c46035b7664256532c390f8e41fcda1b7b2e81a2dcc22394a4c7ed6d8f7671d02d6bf28ac4a3ed39c4d565a20c5d1ba0a4edf559d7145f288701bc631875ff433cc2ff4212b21bf5806c3660cdece4b539f07857171248c14ef6e2de7edf6e5eb955163b"}]}, 0x1454}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="10000000000000003c00128009000100766c616e000000002c000280280004800c00010003000000090000000c00010009000000010000000c000100090000000300000008000500", @ANYRES32=r5, @ANYBLOB="b247e59010d89f96ce7d0d89"], 0x64}, 0x1, 0xf000000}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'veth0_macvtap\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) 12:18:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xa95b0300}, 0x0) 12:18:19 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu}) 12:18:19 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0xd, &(0x7f0000000000), 0x4) [ 3289.339830] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:19 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}}}, 0xe) 12:18:19 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7f3, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:19 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x24, 0x0, &(0x7f0000000100)) 12:18:19 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000001340)={0x1, &(0x7f0000001300)=[{}]}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) [ 3289.529635] audit: type=1804 audit(1596370699.472:6589): pid=11838 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16497 res=1 12:18:19 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:19 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0412"], 0x2) 12:18:19 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000040)=@ethtool_dump={0x0, 0x0, 0x0, 0x11, "6995783b47447f325ba6acf877b2aa084f"}}) 12:18:19 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x28, 0x2, 0xcce) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB="051d9664bc4d6724ff4f43afb9bf09b89631df4932b12401232cf3a08d2d98e315ca8611f58a47a744901a46ab5aec0d279eaa790a92b2ea64700d8b12e3ddec61aed2be9e7f4dadb2c185de7914365ff8d5d3c00b6564bcba613f5badc204cef116783222338d90"], 0x44}, 0x1, 0xf000000}, 0x0) 12:18:19 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7f4, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3289.654550] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3289.719736] audit: type=1804 audit(1596370699.662:6590): pid=11868 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=15985 res=1 12:18:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xaa5b0300}, 0x0) 12:18:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xac4ccf34b33505d0}, 0x6) 12:18:19 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCBRADDBR(r0, 0x89a1, &(0x7f0000000000)='xfrm0\x00') setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) 12:18:19 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:19 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000000)=""/76) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:19 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7f5, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:19 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) 12:18:19 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3}, 0xe) [ 3289.913258] audit: type=1804 audit(1596370699.862:6591): pid=11891 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16513 res=1 [ 3289.917531] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:19 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:19 executing program 2: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) 12:18:19 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) write$UHID_CREATE2(r2, &(0x7f00000003c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x64, 0xfffb, 0x5, 0x5, 0x47a, 0x10001, "a5e01e4fe6e892de790aa6378e27a39429f51fbe971908d8326d1812000d407a8eff307111ec4bb73c93c20557759a588125c629891050be1d9f0db72a27a7312bdf035dbff892a952642df021e8963ed234b410ad5144d1a4df02c74612d785790849df"}}, 0x17c) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbdc4bc6db8728efacaee1f3dfe64597000fddbdf25150020002100010001000000080001000404486b9aff0100ffffffff08000300", @ANYRES32=0x0, @ANYBLOB="0a0006009b06c43aa1fb000008000300", @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4c800) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f00000006c0)=""/4096, &(0x7f0000000180)="cf1e4ee592eef7c78ab41680be4815887ca6fe81942f240c10c396191cba2ab111345382622e8f0a5d1ee4254e2eff9e180f6318d81c0b8205df73cb92c2b0d3b213d5b89ff291691a3c98679db19f580851fc8880b501ff3ffd9138574455111725dcc91306", &(0x7f0000000300)="301db289c786b8a8e0153302d691c21d0ee17a7f055daccb0b9bb7436a0dafb61b5fb14a01ba0c65b7432909ea94592477c475fe87359b5317c10bc6bb4447ed7dfc35c6a62fab248cf14941afdc89551ef636593601ed9d2821ffe6604e32b420ada2e4278ee995f161fa69da211155d66a311879463845acbb94034179db3862bf2ce1ccb91ff9dd64aa2b92", 0x8, r4}, 0x38) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2000000}) fstat(r3, &(0x7f0000000640)) sendfile(r1, r3, 0x0, 0x2c29482e) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) dup(r3) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000001300)=[{0x16}]}, 0x10) [ 3290.054332] audit: type=1804 audit(1596370700.002:6592): pid=11904 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16403 res=1 [ 3290.206450] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xab5b0300}, 0x0) 12:18:20 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7f6, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:20 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000001340)={0x20000000000001c9, &(0x7f0000001300)=[{}]}, 0x10) 12:18:20 executing program 3: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0401"], 0xa) 12:18:20 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:20 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x8, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x4000) r1 = socket(0x21, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) close(r4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f00000005c0)={@remote, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2000000}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000200)={0x8, 0x3ff000000000000, 0x4}) fstat(r6, &(0x7f0000000640)) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f00000003c0), &(0x7f0000000400)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000300), r7, 0x7679}}, 0x18) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @private1={0xfc, 0x1, [], 0x1}}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0xffff}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x8000}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x6c}, 0x1, 0xf000000}, 0x0) 12:18:20 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:20 executing program 2: syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed, "2aff6a"}}}, 0xd) 12:18:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x2, 'vlan0\x00'}) [ 3290.369765] audit: type=1804 audit(1596370700.312:6593): pid=11953 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16530 res=1 12:18:20 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0404"], 0x2) 12:18:20 executing program 3: syz_emit_vhci(&(0x7f0000002a40)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x22}, @l2cap_cid_signaling={{0x1e}, [@l2cap_info_rsp={{0xb, 0x1, 0x4}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x0, 0x8000}}, @l2cap_info_req={{0xa, 0x9, 0x2}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}}]}}, 0x27) 12:18:20 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7f7, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3290.433091] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3290.456060] audit: type=1804 audit(1596370700.402:6594): pid=11967 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16316 res=1 [ 3290.633117] bond2433: making interface veth8125 the new active one [ 3290.641392] bond2433: Enslaving veth8125 as an active interface with an up link [ 3290.722790] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xac5b0300}, 0x0) 12:18:20 executing program 2: syz_emit_vhci(&(0x7f0000000a40)=ANY=[@ANYBLOB="02c8001c00180001000205040000000000070804"], 0x21) 12:18:20 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000040)={'vlan0\x00', @ifru_names='ip6_vti0\x00'}) 12:18:20 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:20 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7f8, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3290.787262] bond2433: Enslaving veth8127 as a backup interface with an up link 12:18:20 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0xe, 0x0, &(0x7f0000000100)) 12:18:20 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'ip_vti0\x00', {0x2, 0x4e21, @remote}}) 12:18:20 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x1ff, 0x5, 0xd47, 0x0, 0x5, 0x4, 0x3}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4480bc8a312100fdb5acaaffa33bf800800000c73cf9560000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000001f0f1070ae56d979c10c00028006000200000000000800050068fa0835b672cc4097f085b5c33d47e42f0c5a698658cbad0db21c4cc04d0c804a783110533970d24678d6665f488de0a1a185c196a3a8f88cf8a8a5", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0xf000000}, 0x0) r4 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240), 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000280)='syzkaller\x00', 0x0) [ 3290.876178] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3290.897928] audit: type=1804 audit(1596370700.842:6595): pid=12043 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16130 res=1 12:18:20 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001e0012f401ff471c1668618dae00080005000000000000000000000023000000", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0xf000000}, 0x0) 12:18:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x1d, 0x0, &(0x7f00000000c0)) 12:18:20 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7f9, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:20 executing program 2: syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_info_rsp={{0xb, 0x8, 0x4}}]}}, 0x11) [ 3291.132587] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xad5b0300}, 0x0) 12:18:21 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) 12:18:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x0, "94abed"}) 12:18:21 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:21 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024000f05deffff3f07a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x38, 0x2, [@TCA_RSVP_ACT={0x34, 0x6, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0x10, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', r6}) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYBLOB="3a0000003038b13fef24258fec323ed88ddfcb05758a953fb7f8b6d643006abfe9cf7a5c687faa7ee8ca2d8a0e1f3869d4d41e7de2e400a57bb4441c93a1a070d929188177bd9c02fbc26390d7e23d0737877f5773f6a560bb2eff5e1baa364e23630eab9c98a6e1af"], &(0x7f00000000c0)=0x42) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r9, 0x6f}, &(0x7f00000001c0)=0x8) 12:18:21 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7fa, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:21 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e06120000c8ff"], 0x9) 12:18:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) [ 3291.309272] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3291.317850] sctp: [Deprecated]: syz-executor.4 (pid 12133) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3291.317850] Use struct sctp_sack_info instead [ 3291.339047] audit: type=1804 audit(1596370701.282:6596): pid=12135 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16547 res=1 12:18:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netpci0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10}}) 12:18:21 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000001340)={0x0, 0x0}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) 12:18:21 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7fb, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3291.402745] sctp: [Deprecated]: syz-executor.4 (pid 12133) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3291.402745] Use struct sctp_sack_info instead 12:18:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'sit0\x00', @ifru_flags=0x4000}) [ 3291.585467] bond2435: making interface veth8131 the new active one [ 3291.593817] bond2435: Enslaving veth8131 as an active interface with an up link [ 3291.606622] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:21 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000000)=0x2, 0x4) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0xc0045878, 0x0) 12:18:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x39, 0x5, [0x8, 0x7, 0x100, 0x0, 0x1002]}}) 12:18:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xae5b0300}, 0x0) 12:18:21 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:21 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7fc, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3291.688471] bond2435: Enslaving veth8133 as a backup interface with an up link 12:18:21 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) sendmsg$unix(r1, &(0x7f0000000180)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000300)="02d0a1dfb4eb12b891cd035ea9789a8607fa187513826b8181838ff6e323614047896bbc7b9f071312c71d9550c5e6b9ab7a361e90a71e76958dd287a2b7d3b4d0a9177d61b3dd42187dac7675230f55262455d30e02dde21ed84a967ddec1db5b170277d9012faf254a43559a53b5f0002db7cc12d7ab003b0d86cb7164d871968c1dab3dfe3322e8b8f0", 0x8b}, {&(0x7f00000003c0)="a6090959b3962ce086e3a0e7503a9e664a7a6194c82383aa1e5b3c8eec5dc9e86549ec2ea5421a6ec47d6ace8c253d37e19743ed90cf33fa603f9d6f88fef0185d6729485a16d828775ae5a9193ee555ad0b440650a8e68145e453530d4bf1bbe3a75377ab3893a459cafd895d1b1f1dfcb45ab95d2e5f4aa91b409b341624a460f6ecd3114d2d6e7de8c2b850531ddf153b39ee38e04c780747a0f7f6f5f85f74fafd2ede9e7812944f15b8e63f5c791e454d97a7c730df74d63bdbb08dc3f3ac7e8914d3af0ef7575b194d9451228be426ed678befb42d8f8aa77646e3bf9501d32cc8a82f32950a7007251f3acbf0bd", 0xf1}], 0x2, 0x0, 0x0, 0x4004000}, 0x80c0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304000000000000000000000008", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0xf000000}, 0x0) 12:18:21 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'caif0\x00', &(0x7f0000000000)=@ethtool_ts_info}) 12:18:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000200)={0x6a}, 0x2) [ 3291.759613] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:21 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) 12:18:21 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000000)=""/70, &(0x7f0000000080)=0x46) bind$bt_sco(r1, &(0x7f0000000000), 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000000000000000800000000000000000000000000fe090000a04d93d9c6db6dce000600000000040000000000003f"]}) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='vlan0\x00'}) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @fixed}, 0x8) connect$bt_sco(r1, &(0x7f00000002c0)={0x1f, @none}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000200)=""/81, &(0x7f0000000280)=0x51) 12:18:21 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7fd, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:21 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:21 executing program 2: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'bond0\x00', @ifru_names='sit0\x00'}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x8b35, &(0x7f0000000040)) [ 3292.046776] bond2436: making interface veth8135 the new active one [ 3292.055084] bond2436: Enslaving veth8135 as an active interface with an up link [ 3292.087832] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xaf5b0300}, 0x0) 12:18:22 executing program 3: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'bond0\x00', @ifru_names='sit0\x00'}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x8b0f, &(0x7f0000000040)) 12:18:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000000)) 12:18:22 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:22 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000000)) r4 = socket(0x10, 0x3, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000040)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:22 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x7fe, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3292.165972] bond2436: Enslaving veth8137 as a backup interface with an up link 12:18:22 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$packet_buf(r3, 0x107, 0x0, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0x200, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x50, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x88}, 0x1, 0xf000000}, 0x0) 12:18:22 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x4ced}, 0xe) 12:18:22 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:22 executing program 3: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e0d05c8"], 0x10) [ 3292.271354] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:22 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1f00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0), 0xe) 12:18:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xb05b0300}, 0x0) 12:18:22 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB="ddb92fe60e393855987a0c9d4c191c00d9a9593685567db04e8f6c818f873be52035d32edd4b7954cce64670b93096bad279077eead159d1379ac71ac9b605d5e28eb923f9d72429114a97946c9265fc2ccb26584056e15fe4d82eb20d0527eadc72c9e4c994828d8bfc727122f640d5f8f17bfef703a06e64a9b76632c03f43497186e25e42ef20ea9c396297453832ea034b3935e1bb084e382f70aca14ec153a9d81a87497fb46684a1a31758a9cb7e2f104789704142453d6a32a53b2153c48d1d000000000000000850da9b"], 0x44}, 0x1, 0xf000000}, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x23c, r5, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1f, @empty, 0xaa4}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @remote, 0x4}}}}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_LINK={0x138, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x605a5d9e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x25}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe9c}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @local, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4004042}, 0x8810) 12:18:22 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 12:18:22 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x7, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000040)) 12:18:22 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:22 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x8800, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:22 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000040)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) 12:18:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000001340)={0x20000000000001c9, &(0x7f0000001300)=[{}]}, 0x10) 12:18:22 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:22 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2000000}) fstat(r3, &(0x7f0000000640)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000000c0)={0x3, 'gretap0\x00', {0xfff}, 0x400}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0xf000000}, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x4) 12:18:22 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000001340)={0x1, &(0x7f0000001300)=[{}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f0000000040)={0x0, 0x0}, 0x10) 12:18:22 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0xf000, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3292.918029] bond2437: making interface veth8139 the new active one [ 3292.934655] bond2437: Enslaving veth8139 as an active interface with an up link 12:18:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xb15b0300}, 0x0) 12:18:23 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'vlan1\x00', {0xedd}}) 12:18:23 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000040)) 12:18:23 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:23 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:23 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x42, &(0x7f0000000000), 0x4) 12:18:23 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:23 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0xa, 0x0, &(0x7f0000000100)) [ 3293.206456] kauditd_printk_skb: 4 callbacks suppressed [ 3293.206469] audit: type=1804 audit(1596370703.152:6601): pid=12461 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16707 res=1 12:18:23 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000001300)=[{0x20, 0x0, 0x0, 0x16000000}, {0x6}]}, 0x10) 12:18:23 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x1e) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0xf000000}, 0x0) 12:18:23 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0xa, "0ecc4c6f229eae32f0945ce4cc77671dc9177ef8c80ee17da7fa38f873ac088a", "a40d579a39e273c973c4bd1903cb035ad753c16f4ce1e070a5532b6f80f75d09", "2ddd5804d0135cd2e192ed5c414f39c5e1d6c0ea50fe25ddfc632f5e8cf986f4", "d1e5a69c817103f805d382e820d21c8ff87b9d93226c24f00c23f53dd45a747a", "ec43df477f3d82e82e171890415d31a4160590109c6ce0086386ab449cff91a7", "1e18c62fc4eb68a62d1f48a9"}}) 12:18:23 executing program 2: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0430"], 0x6) [ 3293.426430] bond2438: making interface veth8143 the new active one [ 3293.434864] bond2438: Enslaving veth8143 as an active interface with an up link 12:18:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xb25b0300}, 0x0) 12:18:23 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x2, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a1, &(0x7f0000000040)={'sit0\x00', @ifru_flags=0x4000}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 12:18:23 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1}}}, 0x4) 12:18:23 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:23 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) prctl$PR_SET_FPEXC(0xc, 0x3) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x2, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000000)='syz\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4, &(0x7f0000000380)={'trans=xen,', {[{@access_client='access=client'}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@cachetag={'cachetag', 0x3d, '!'}}], [{@obj_user={'obj_user'}}]}}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x0) [ 3293.514686] bond2438: Enslaving veth8145 as a backup interface with an up link [ 3293.586351] audit: type=1804 audit(1596370703.532:6602): pid=12530 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16754 res=1 12:18:23 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x33, &(0x7f0000000000), 0x4) 12:18:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="1a00387164b650000000000008020000f8db00000000000000007f46f3b54d8bc6"]}) 12:18:23 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 12:18:23 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'bond0\x00', @ifru_names='sit0\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) 12:18:23 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_advertising_info={{}, {0x2, [{0x0, 0x1, @fixed={[], 0x10}, 0x4, "ae99d13f", 0x7}, {0x0, 0x1, @fixed}]}}}}, 0x1d) 12:18:23 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x3, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xb35b0300}, 0x0) 12:18:23 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0xa4, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20068880}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:23 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:23 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'rose0\x00', &(0x7f0000000000)=@ethtool_gfeatures={0xc}}) 12:18:23 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu}) 12:18:23 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x4, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:23 executing program 2: syz_emit_vhci(&(0x7f00000006c0)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}}}, 0x9) 12:18:24 executing program 4: pipe(&(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r0}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:24 executing program 3: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}}}, 0x8) [ 3294.070780] audit: type=1804 audit(1596370704.012:6603): pid=12589 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16865 res=1 12:18:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 12:18:24 executing program 3: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04130902"], 0xc) 12:18:24 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) [ 3294.341235] Bluetooth: hci3: command 0x201b tx timeout 12:18:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xb45b0300}, 0x0) 12:18:24 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:18:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x89f0, &(0x7f0000000180)=@get={0x1, 0x0}) 12:18:24 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x3, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r4, 0x8250aea6, &(0x7f0000000000)=""/127) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:24 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) 12:18:24 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x5, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:24 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8903, &(0x7f0000000240)={'veth1_to_bond\x00', @ifru_names}) 12:18:24 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a1, &(0x7f0000000040)={'sit0\x00', @ifru_flags}) [ 3294.481349] audit: type=1804 audit(1596370704.422:6604): pid=12638 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16977 res=1 12:18:24 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001340)={0x2, &(0x7f0000001300)=[{}, {0x6}]}, 0x10) 12:18:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c}}) 12:18:24 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x1, @any, 0xb}, 0xe) 12:18:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x7}}) 12:18:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xb55b0300}, 0x0) 12:18:24 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:18:24 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'team0\x00', @ifru_data=0x0}}) 12:18:24 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0xf000000}, 0x0) 12:18:24 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x8, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu}) 12:18:24 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c800b200ae0001000a07020004000b02620002007f00a762568db586902acb90e90bf570e7129709f764c121a71c81fdffffffddbb2d244a485f0702f02c370a48c6a8b49ba42c1cb5c4b68b03040fd65d53da7c70963868a383482c2c2bcd862030b70efda05f3286efc488e82da0d814e2aeb702050400030000000502"], 0xb7) 12:18:24 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:18:24 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000001300)=[{0x48}, {0x6}]}, 0x10) [ 3294.873239] audit: type=1804 audit(1596370704.822:6605): pid=12719 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16945 res=1 [ 3294.899231] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 12:18:24 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8901, &(0x7f0000000180)=@get={0x1, 0x0}) 12:18:24 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0xf, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:24 executing program 3: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc8, "354152b3effa50da"}}}, 0xe) [ 3295.000631] audit: type=1804 audit(1596370704.942:6606): pid=12735 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16945 res=1 [ 3295.044172] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3295.195417] bond2440: making interface veth8149 the new active one [ 3295.203873] bond2440: Enslaving veth8149 as an active interface with an up link [ 3295.216436] validate_nla: 12 callbacks suppressed [ 3295.216444] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xb65b0300}, 0x0) 12:18:25 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000001a00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0xf000000}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xd}, {0xfff1, 0x3}, {0xffe0, 0xb}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 12:18:25 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_num_supported_adv_sets={{}, {0x4}}}}, 0x8) 12:18:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x3, 'erspan0\x00'}) 12:18:25 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:25 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x10, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3295.300943] bond2440: Enslaving veth8151 as a backup interface with an up link 12:18:25 executing program 2: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f0440001b04"], 0x7) 12:18:25 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r4, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x981014}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x28}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdf}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe70}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000000}, 0x10) 12:18:25 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 3295.372446] audit: type=1804 audit(1596370705.322:6607): pid=12798 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17045 res=1 [ 3295.411428] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:25 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'bond0\x00', @ifru_names='ip6gre0\x00'}) 12:18:25 executing program 2: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}}}, 0x2) 12:18:25 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000140)) [ 3295.526575] audit: type=1804 audit(1596370705.472:6608): pid=12814 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17047 res=1 [ 3295.692820] bond2441: making interface veth8153 the new active one [ 3295.701520] bond2441: Enslaving veth8153 as an active interface with an up link [ 3295.715269] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xb671d97e}, 0x0) 12:18:25 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_white_list_size={{0x8d}, {0x7}}}}, 0x8) syz_emit_vhci(&(0x7f0000000980)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x5, 0xc8, 0x9}}}, 0x7) 12:18:25 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x88, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:25 executing program 3: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0c04"], 0xf) 12:18:25 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x1, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd8, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0xbc, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9823}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1480d76}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x765}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x225d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ced}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fe54d14}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x149e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3914}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e0ef80d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x165409f5}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39c1b45d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bdc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5686959d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9192}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5226}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x552e30a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3749356a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bd8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52ff0972}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x294cd381}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4c040}, 0x80d4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:25 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 3295.794865] bond2441: Enslaving veth8155 as a backup interface with an up link 12:18:25 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 3295.843299] audit: type=1804 audit(1596370705.792:6609): pid=12874 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16929 res=1 12:18:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r0, 0x89a1, &(0x7f0000000000)="987b4628b4dd9861eb5f703e53ff3319e49fd74c6fb18d1f178e57503185ba6fe8c5fa0b3d23ba8649420c08b521c8179bf6a0ab1fcdb829525bfef917ddef7c0885b918074b0a70d25ac115b81e9bbe507d5e3c3a9d517ba83586ed2e024a3649389dfe349f476c97588844bd51ab307135841706c886f7a1e83065675f34b074d119b9db317e8e6d86b1a25e4321704252f1bf7bfc48442aaded9ba8d95148b050da65f9a692f1e4855b8a2e211b5db4ec8c6c4f3babf4b2b81f1d50edb9cf27c2ede16bf95f4ec4c19b9801b3d2c9bab8ff47c77401300b97613a537d6d86952b9c475118") 12:18:25 executing program 4: pipe(&(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x4, "42bd458c467c0ad7804af0d36faf19f7167f2f78714f323a8c35e3376753104e", 0x4}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x4, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008010}, 0x1) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:25 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 12:18:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000001300)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) 12:18:25 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'vlan0\x00', @ifru_names='ip6_vti0\x00'}) [ 3295.952828] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3295.960114] audit: type=1804 audit(1596370705.902:6610): pid=12888 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17048 res=1 [ 3296.175173] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xb75b0300}, 0x0) 12:18:26 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x300, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:26 executing program 2: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) 12:18:26 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 12:18:26 executing program 4: pipe(&(0x7f0000000100)) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@x={0x94, 0x8, "b5593f54f1ce"}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:26 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)=@ethtool_gfeatures={0x3a, 0x1, [{}]}}) [ 3296.371223] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3296.421498] Bluetooth: hci3: command 0x201b tx timeout [ 3296.575522] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:26 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 12:18:26 executing program 4: pipe(&(0x7f0000000100)) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2000000}) fstat(r2, &(0x7f0000000640)) flistxattr(r2, &(0x7f0000000280)=""/184, 0xb8) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) splice(r0, &(0x7f0000000000)=0x6, r1, &(0x7f0000000040)=0x6, 0x1000, 0xa) socket(0x1, 0x803, 0x0) r3 = socket(0x10, 0x3, 0x7) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304f1ffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001200"/40, @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0xf000000}, 0x0) r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1f, 0x6040) mmap$fb(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r4, 0xef000) 12:18:26 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000001300)=[{0x20, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) 12:18:26 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x30d, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xb85b0300}, 0x0) [ 3296.774752] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:26 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 12:18:26 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "6454334417cff0387e6f3e25559eb987e470add8cdb2519084ccf61575078cf2", "187d06be857fa353adaec20e8335b99638435b1c9dacf35cf44dfb4ea23beb47", "2e81f132f7c212cf8038e5932562355c521bda3d99ffc1cf8cd867f172efc130", "bd0e3885aa6e9cf6686135a4860c8901ad213e87a84e829bdc2b4782f1207b88", "00cb083d68db9a8846573134673246ad5cd6e0ec342b0d29d6756cb24c1882d6", "83d42164c60106d321b5819c"}}) 12:18:26 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_link_policy={{}, {0x9}}}}, 0x9) 12:18:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000080)) 12:18:27 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x408, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000040)={'sit0\x00', @ifru_ivalue=0x2039}) [ 3297.090338] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:27 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:27 executing program 2: syz_emit_vhci(&(0x7f0000001180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@fixed, "423c447d5eb0c655"}}}, 0x11) 12:18:27 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) 12:18:27 executing program 4: pipe(&(0x7f0000000100)) socket(0x9, 0x80000, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000080)) r2 = socket(0x6, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'hsr0\x00', {0x4}, 0x9}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_getnetconf={0x24, 0x52, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x80000000}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x1}]}, 0x24}, 0x1, 0xf000000}, 0x0) 12:18:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xb95b0300}, 0x0) 12:18:27 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x500, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)=ANY=[@ANYRESHEX]}) [ 3297.713668] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89a0, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 12:18:27 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x5, 0x9) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000040)=0x10) socket$inet6(0xa, 0x5, 0xfffffff7) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:27 executing program 3: syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="043d"], 0x2) 12:18:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x400442c8, 0x0) 12:18:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001340)={0x1, &(0x7f0000001300)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000200)) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1e1) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000200)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x8, &(0x7f00000003c0)=[{0x5, 0x3, 0xf7, 0x8}, {0x3, 0x2, 0xfd, 0xb0}, {0xfffe, 0x0, 0x81, 0x7}, {0x1ff, 0x40, 0x1, 0x80000001}, {0x100, 0x0, 0x6, 0x4}, {0xff, 0xc6, 0x8, 0x1}, {0x2, 0xef, 0x40, 0x3c90}, {0x8001, 0x3f, 0xfe, 0xfffffeff}]}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000001340)={0x0, &(0x7f0000001300)}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000200)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000001340)={0x1, &(0x7f0000001300)=[{0x6}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x89a2, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu=0x5}) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000280)) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000040)={'bond0\x00', @ifru_names='sit0\x00'}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000001340)={0x1, &(0x7f0000001300)=[{0x6}]}, 0x10) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000380)={'macvlan1\x00', 0x7}) 12:18:28 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:18:28 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x804, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000000)=@ethtool_dump={0x2}}) 12:18:28 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000001c0)={r1, r2, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) 12:18:28 executing program 4: pipe(&(0x7f0000000100)) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x48) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xba5b0300}, 0x0) 12:18:28 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x800442d2, 0x0) [ 3298.558410] kauditd_printk_skb: 4 callbacks suppressed [ 3298.558421] audit: type=1804 audit(1596370708.502:6615): pid=13157 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17106 res=1 12:18:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8940, &(0x7f0000000040)={'sit0\x00', @ifru_flags}) 12:18:28 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000080)) 12:18:28 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000240)={'veth1_to_bond\x00', @ifru_names}) 12:18:28 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='wg2\x00'}) 12:18:28 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0xd03, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:29 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:18:29 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x40}}}, 0x7) 12:18:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xbb5b0300}, 0x0) 12:18:29 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000040)={'vlan1\x00', @ifru_data=0x0}) 12:18:29 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket(0x1, 0x803, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024000f05deffff3f07a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x38, 0x2, [@TCA_RSVP_ACT={0x34, 0x6, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0x10, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) bind$xdp(r2, &(0x7f0000000000)={0x2c, 0x8, r7, 0x30, r0}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:29 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0xf00, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:29 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="200000005c000000db1e08c62e7d1a1c035c000000017b9fb4c16ddd6282251d65"]}) 12:18:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000040)={'bond_slave_0\x00', @ifru_mtu=0x2}) [ 3299.426987] audit: type=1804 audit(1596370709.372:6616): pid=13208 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17297 res=1 12:18:29 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'geneve0\x00', &(0x7f0000000080)=@ethtool_regs}) 12:18:29 executing program 3: syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x0, 0x0, "da7e3bcfe9888005"}}}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'gre0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}}) 12:18:29 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', @ifru_names='sit0\x00'}) [ 3299.647326] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:18:29 executing program 3: openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_pauseparam}) [ 3299.761147] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:18:30 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:18:30 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000000000000000800000000000000000000000000fe090000a04d93d9c6db6dce000600000000040000000000003f"]}) 12:18:30 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x32, &(0x7f0000000000)=0x3fd, 0x4) 12:18:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xbc5b0300}, 0x0) 12:18:30 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000003a80)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x34, r5, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x40, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000003b80)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003b40)={&(0x7f0000003b00)={0x1c, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004090}, 0x20000044) r6 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001066e8aec30000000000000000000000432394e2463f7b83e56368640f02344c6fec0860965c5581097b4aad4ef143f3a13f6121057abd416f4918b367f9eab2549b0fa2431ef98498899d92b1ec7c83e5e2b7b0f37914919a2bfc2b672180ed0437b8c4458f1f0b56936651", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008010500", @ANYRES32=r1, @ANYBLOB="b03df16ea935fa6c8f77"], 0x44}, 0x1, 0xf000000}, 0x0) 12:18:30 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x3f00, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu=0x5}) 12:18:30 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1f0a00c8"], 0x22) [ 3300.295972] validate_nla: 5 callbacks suppressed [ 3300.295981] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3300.329288] Enabling of bearer rejected, already enabled 12:18:30 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f00000000c0)) [ 3300.354179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26128 sclass=netlink_route_socket pid=13274 comm=syz-executor.4 [ 3300.373086] audit: type=1804 audit(1596370710.322:6617): pid=13276 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17297 res=1 12:18:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000040)=@ethtool_dump={0x2}}) 12:18:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)="987b4628b4dd9861eb5f703e53ff3319e49fd74c6fb18d1f178e57503185ba6fe8c5fa0b3d23ba8649420c08b521c8179bf6a0ab1fcdb829525bfef917ddef7c0885b918074b0a70d25ac115b81e9bbe507d5e3c3a9d517ba83586ed2e024a3649389dfe349f476c97588844bd51ab307135841706c886f7a1e83065675f34b074d119b9db317e8e6d86b1a25e4321704252f1bf7bfc48442aaded9ba8d95148b050da65f9a692f1e4855b8a2e211b5db4ec8c6c4f3babf4b2b81f1d50edb9cf27c2ede16bf95f4ec4c19b9801b3d2c9bab8ff47c77401300b97613a537d6d86952b9c475118") 12:18:30 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x4000, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3300.581002] Enabling of bearer rejected, already enabled [ 3300.605342] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:31 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:18:31 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @none, 0x1}}}, 0xe) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc8, "354152b3effa50da"}}}, 0xe) 12:18:31 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x7, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 12:18:31 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000640)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2000000}) fstat(r1, &(0x7f0000000640)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024000f05deffff3f07a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x38, 0x2, [@TCA_RSVP_ACT={0x34, 0x6, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0x10, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)="bcbb8c42011c29d81b845290dbdbc6749eac5a3c87233ea78b4b8549b2b4ab18ca942e53f7297dbe1765f19ce84ffab23bacede8cf35bb7fe7da162d142ed7fb80dd26c64fb36ed20faa5ec08f12fcab47b6072c9eaeb868e45f0b8f1b58081b7f9a7d2e871eaf89559524a5b72def65e2699775b281b07cb2209bae6fbdc5fb095afb9d736800c4257f8579a2d00fba6a330259cb17124dfa787c1ebfe41e917d91d5765b01f6ddb1e1b39b4dde3f264f37712ea8ef778d264a55040fc837cff883efe167e91d9ebc9d1b2e485c2a127ac0cc0c5a2649b678506672d72ad7", 0xdf}, {&(0x7f00000000c0)="4853fb7b504ea946f226152536452b2066c2aac5f55ddae7f947e16866f3f083f96cf6928548db1995377aeed42f8bccc15b9bcdf724c3fbe5", 0x39}, {&(0x7f0000000400)="48b655686f03e6e61769d191749dac951725c84717aa22011341f55ad77101fe63fbfbfbd02900b9fe60e30182eb290286976944be79a7585d6ce45ec0cd8d60a4c97c92eb1ea36f4c1394f2193134fb1982ed3ee1a467e764d0aeb81fc420044a436f036249b958e7310d9230bfffd6025a45f03730202f3d624ab94d509145b3851893e44a3bf7fc34c4754866c809ff8f33363af43e9af7524db7b3652cd0a6283ff1ae19fc5d643deaf283a40f596fb53c46693b396fcde9906378d285031920", 0xc2}, {&(0x7f0000000500)="264088bde42708b6e5496565fa0f6e322e16b6d022104d9b2fba3e7e938a9bcddbcef289f7456bae62b849865b5a4438ff733ee3349ff56fb46c05e52fa1d198b6513220e482d017986825800a154a9666d0dbfa6c2d42cd9a929531929ff0477b27e3a9277477ee519a3f02a5e1ad18cf0ec97a3e3f92a0a94eeee24353f587bf95d13178f037ef9ca953d54376d7cf7341e117d75f1a3bcce5df14e3171b91d8cee4a57c369f5508131ab685ef5dec317f75d7cf0c23bf44eed6d182376bb686e48e014c0ca97adc638ef0fb3c20bf83f8f460e193cf0564bed0247f29b165c212ed234de7715c6b931c358991d666", 0xf0}], 0x4, &(0x7f00000058c0)=ANY=[@ANYBLOB="880000000000000000000000080000000f37e4dca43a34f26916dc1ba295bd8454cd15bb3d53d5b75da42775ca67f6e28ce4e48d2f0c938103c3e9e90dfa65cdcbfbca76cb4580af419a70bd2bf0197ede4a25a0e891dda0d2bb24b71196185ff06ddef3dd9ae99934e842eec33f0b19445e9e92e12129a4b31f69e2c0c9da5cb206b2f1411c4083300000000000000015010000f8ffffff0f6194125657d5c91b97221d6e0f1451228d8df6f574d66ca50000000000000010100000000000000b010000010000004ae868d4b7e761fc05dc2b2ec6b4dae1259bd70d1156077716b281c087eceb7dd5bbd18e0ee947756e3ac6f6e55edf41fbe6abcd76073d07576d8e283e62f24508f4d3ad01395fd75312bd0b56cca977bed10607357d6fde5fa58cf42020b882dde7a88d459fc9642f9a684768040ce29d7eacb6676d60561bd517381751b33987992da50aef7ecaf72a18c6d92327275ee038b72916b9b322a4bf7915c6d42f826aa1c53f7f179aa655c548865f0fb57b6d034b8ea9ba2ab6e41be0931e7b9a7e10a2eace8b54283a1a88768cb448b1433af14e4e23203e5c64f880e280e4ca1385efbdd17819405d8d3761da8d4e45c9b14bc78935217c52bf40a8cba255ae7178c58b6ed4cbdffd1f75424baa9154c5782b356e4a7c928fa4cc72aaed9783089a13c65fac95091cf75f9a8f96b565bc154d72375cd72ab8c1304eb67b3011baeb1e9b6a205a124bcd445e9b8044091c670e0f79e61873bb6a2e4fe324b04ff4f4715b0f499726644f0378259f959052e90a68d233759be766061fce4c930e2faa272693cafb515257f5d6bc1045131b1b693209c9c0a34921dc7d88ec114b7446529522bd32ef3cb47b25daaf72ae46e0ef42b8a1546c12b68da9252a9944a8e484df67303e77ae0ab1309cd1725152dbb4c96099f34a0ac6ff6d04bcc0db3246fedb385c1e850c2760c2f6adc6647a55205f7bfc6832bf3bd85c01c31e2be59b6c6f7e9acb39dc422d1e9ba83d3e47a661087a3114d7f8417d13d42dccbaf9789794172f1357ef42ab7f64eb09d7061708d29619adc8fc45d279a9f12ac7bb14ea178dcf7ff598c8d68270430826062ec28a41c912643ef7b21e14f5da8ff2f6dae31e50e798f403bd06d6eacb0282b117c0add8e5108a65111d6a4c2378195119a8e3d6ae5deb7dae8e8ef5da779e2ed0d253bee17f3439ae554e07eec86a6c69a113b5072c324a3263cf1c7a4d8712919b9295c9a89b4593324f95ef6d35e1810683077bfdf5ad310d36c3549aeb4dc787594cc543c9824f0bfaea7f81beb8de63ea75238dd8902ce31fbc6bfe27f1f110402acba17588cadd48cf1c1a60de93970e8884845ebb11789999e9e7fa1838c5821df723c03d1743bb4ee9912f94ce5a4ef281b80ac71dde0ff4eac7e6b8386d6fbce7c28dff48b61d5df6d5d94ab0590a5633a6ad06f736f37907db744cae4cd1b5d870a125c5f17a9fccba305e0da80f83b339fec9a54a9f071dbaab10736d73c31c5a43e29a410f70fe92622f4721dca5387f9f201a76d97f9995af76294361a506fc1367aebf487a1376e2be89e31d21023f1bb57db871b616fd415185dd5c7de3560f56fb8157c48ed55dd0a9b700e29841cd3adb238439a0573f68571dedea0d9acb4240403ce1eb7b2db54918dab1429cffd9c862261553b18b887881ac0b51a116c4a17757650e0020e524e14df4a5f17b25fb792428bf5ed3013300aac4152ea9895556217e1dc94e2b57b0748ccf28bf92af68959703b3f1c887196514f1eebcc688f81156f2c50042d6bd79971daab93bc5ad31727e5551d6b2e218462e90a87025221c8fe676590f18e82813e2f60c4a6203392000d5346273e4a15101c60e2b955f43189eb1d2da23cb5cb56e9cbe2fec72482679d0287bdc0f1d2278b128904be232ed6ab1237ff51fdc297c896d576fd4c6773c9db7abd1ee2114d32153118f0caaf6f2ddf41c35a32d4415d85acd5dd16c23c7118774905790e5f223a6df584570a7b1baa959113bf39c47f91779d0cf35175989aafe879dd6bb3076d6ae2f166a15ddbe1df4298b36b33784ec48277194d2b39612b281b676169c40360e574a0f1396f43f5508b60725c10adbdb968c197518091716b3b0fc3ad098aa0e9da9531419c26ccf2c718f89a1c97fe9a9a7b57d541ab7f15316e74438933383190e7c4d8dde34e46dc06a9dca8c4cbae8bfbc0577e08f92d49a061f36a333238d1e5223b2306903bdc1d623090b8e2b0aa5542ee085690a4793884478fc9b07e609d03efc531bd8d4e76551c825b820c73e5c3ac9defdd1cbc7d4b49a1eae3348ea7493316dfcc454e171d44ed2eaf85c2f14c8b19eed6789a8664a9e58baf40e6c426ab52940ce956dfdc8659243c15631c50a3d6131d29c72e1fa985a60c6391949488d3b4833e2a5bed9fa4c2b5466a0cc81121e0fa2d286081a0a47dbe7ca7f3623a71066bc6a81980f586a7b1232db84af6ad65d9772f6a015bf8d4d1c1bd36d04f146be602e8d623fd6d0727271c4bea7c6a44ae451d87ce02ab88d2161000dc37e7500dbd3a00b8d36b3b82efd3d373bac60e067e5178580cb7416a110093ddacec50ce6424927d547f635e38c23b655d6a3f9f01c22d6c712c6d116241cfb47f4e0c740c8c12ba6ef313861b4177c4f944d29cdbbed2d93e27195dd43e3ce42b022ee15b9f3dab6aba6681036820b756866d070a9f632739b5cfd8058a048b27a83781133e65ed5e65c87a6675693bc3bdea41dddb38f75798e228ea4891f2fbb60e027f2789b5d8306b1cf9b009085e644e61a2103ba92fa4d5dba611197bf5e073b4446ffca1ef2641438b936a2fd342f85f714fa668b32fe49d358a283366a132f6ed26592e70ed7071eec51eac68e9b4546fe054892b5ad7ea189dcd99c65e4987370878cb4651600b592f5d2c1599127819149b6a8ce6cc110790c50cd30ebb5e91eec3d468ba74fad2e2a7f56e3e6dbbf973f83f76ef204d28ddf37cf1842732562abab789191af7abed99a5062abd21a56b006633922b5516f3165092dc932978e268af8202e2b7e9dffe845233fb5c3b0bf131159dfcaf62e89a5bda6d2698d317f193c7e2a870825adce2937e38dc0a4bb2bd6d282646db038958f0f56b679044305589a31aee9cd00c3e80eb832abeec62d367b3139faba0f93c2f3e3093bfb93d80864e446b9ea75da485d4b6fc5edac4a6877ac5923a4fba1582675fd1a6512c2cc1d76c09f051dacc0979be6cce0b35f2b426e9d413735997801d7ce27ebbcde43dee101e542565debbb75866bf979a196fb40feca34c8187ad2c04e91022a590e12497ff3ebfdbcbba48d8327dfbe02fdd4d8c46b809b2f709da2470a4df97e59c8e16576974c86fe736227c5fede8cd6301eb2107bcc9d18c56286a5bb623d3c17f150b28fa76d116a0e3017af14a6556c37d03c87dad9b70b2f25f80cd8955b078fc35719e4df7c619fc385af07472b025040ac2521f4c309ff245681cf611a080ae318852c8729dd3823726632d7e7c9300ff1cd9c43730bfdceec9fc87dd9dce3416f7dc584fc29c353b2312e07746462659e59322854cbd55da2ac4b8231c5ff53c07a37b8dc36cb93dbcef5873c5a3f056528254d672177c3d8457c11e231f43e3841c8bb80bde8f1f02aa54ed8903c9c62f7da15bcf2f6b9cc6ac49894fb0f78b701d7c64da957b8628c69b58c0d5c1dd7966f3326cfd3fb568d72a610d5dbf6b0bc6b62bd0be2e8450f958b34074682ee5370e8ece20cd6984d8b92f1ed30d445064e8ef7a9ece418ef710a0ba9d902c9bee0759dfd1ff74e04ec5b31fcbbe4fe670731bd9de6efbc378fcf034e0c62503651b4f7bfd5c525315b7fd8bdb2caff85bf72576edc1a7b0688339b3dbd5c5349ea36b4f210d0b298f02af816f5aeacf0b5e166b3c0c07fabb3dad7b9a7da70f923832acf925085314b6b859eec6b8b4b285b5f375996025ed72254b3296d03f80fc7c732ed44981fd34d226e0829d365ec0d5c1f5323b19f73b28c136aeff848d58aae64c624ed8403aeb2bdd7f586d7d122730862bca779b52c104054321db3a230edc3a7721d744f36d202cefc23f54230cac2b69fdc0aec9ee87e731d2ee555e36494da09d401eed86a15082cc544b05ca3616877d012ee228d31ebfb080e1fc960b7f77ee74349801d5528ccedc77b9b192a8047d70d06ea2f0ac026659a9677ce60e4f03cb5b6e997e4b383f99cbd4f275ae79ac403bd32aff770c346cc23d837baf582d5dd43c44a8d8d70ecfbb7fca0c323277fc63f46962fe6323687ca6dec95d8b9cd57410fe1667cfef355d89fe4ca9218008d79776ed5df9990ad40eb655f5baf18d2c0f22a5f9742f3308039a400565fabcaf6bb17527efaf76fa95f1959ee3fc27a1c4c8f7055da6cbecdd2b371b878561c8b77131523764fb8ff25ee48650468f3fbe6f20f9415ac546b7e66b957834113fc8b90120733254842a95142858fe4581bcfd0ddbdac5ef6a1d6a14d86cb347a50c669a7b16a249f5a6c4f9a1b35e294aa831d9da9a3fde0d56d73b8705a0a50f8d58d7a7200625dfaa16bec25d6d549b417bf0b0170e2d0fc5483b0482900d141ebf0de67a2d66984a93134307fe74f96af1fe0cbb5ca945a1a82249e0d7147e74f6e238f562fcc7054f9c0ba722c6c2171425213e5993db8880bd38495f15c27445deec9cc354409d05fb990b7495b0c513421a0de1e501f9859417ad6b6a0055b2fe8bceb8cdd66342bb4d008f89bf4eed10d002aebac510f12da1a6deb7654f405374ac6d48f41f8a146c23daaa1871115ff80aec277145f5d48df67634015509a1b7d980ebc1c32b053fdefa214611ffa993cda9911569fc9a565372e570ba8e33accb6f433804f3b6771734f38280284419c3842f5c2cd75b157c2af97c1bbc372d0c7569f10c2311a2b8ecf5a87cbd75c7695f5a58dc564228c02e1c2e79d9632282f5638b461e95eba1d2beeaaac00f80b2de786c5280a9aac0092d67224e00bdcd3c4e95dbbd279a38650bbc705a497f07d1daa68897e7a0791803356517c0378787f30b586e8efc4c04ba746be291071c268f293312a465455bb078ebc48a4e5e6ab422857524ec44fb4fa6550e9bd58a8e643da07f84fdc50cf38e28a1eb83f36b2b61a3da4eb93e8c42c85365a82353e1cac2f26c2335ec2ca2319f6e6f498105c026279bfb9f8f739233240b0325d70c88ef5c03307b3a8b999d079717893334a42716ff9b7e528b14ba49a1939153874c10634c1f3dfc790dbaf3b17a7b7ebf1421bb116dab5bfb6ab7eb3ca58877d1bc21e777b889e6ca1cce617dedf8f9cde374ede08eab1715afc91b77a53de8625f70f55ae7029ee977bb51453b2632fcc41f314c325d08e953c598fc28aaed9b49957d07342d4aed74990557f169753da184cd476a451dcdb344a165c7d745b497c8538373119c4928d92369d91b3472ced9bc5665ac63ba552b6ad9d145aaf7b055caa7b9520701cabf15c36979c49d374781387745697d3c7b2c109bdf1a925dc329dd9746a3e251129818445eb71e224244e6b83267d8edf53eba81ed7754d1787d3b7607b9abbbb3990ae973f7f62286c1de94e2fc321750310ac44ad88a28672a37fe09b51844a1424d09e053faad264ffeac8b6b9a77a8330896917ecc53b9756796205a278f9f54218ffcbfb19ce48f0963937f5cfcb7977408102ebe0b11bba28ae34d617846d21dfc966a575f24609d3baa5474abd1fe37927c07e3a55f0eaa6248f0f68c51ae87f2656f71d0292510579c55c88eb9ed0a3085e1567b1f6ac8cf867deb0f602a6329ec3d1e04985accb94fedd6f97f14e44b33d3a932fa8be9acdf115a65f125b5811177697b87ae81f99d9c12f241e77adf15ea1ed6b64f53131dde0164ece44413c1343252855aa1d0a29f12714d5eacd2c8baa9bf395e6b75d1758a7d433a8a6b0ac94bef2fc6e7ff989d2ed0a808944a8fd8f681f8114032c2836bb705254dfe42638a65ac6a95535fad9f618000000000000001201000007000000a21c97f7dc7cdbd9d80000000000000012010000ff0300007f6132f1ec7b3c320cab4b2cb8b9242ff828d67e2230d9517b5c58454e046b1fa3d0ce6996d22a6e01beae087f7e95c0da083e9ce77455d6fb95e20ddcdbe8404025437bd99e2aa50ac27589106dc7973cd810890b716fee75f34741928ac44746e69ba774012e307b4b33280cd1c2a3548cdfc0e0e6c068528e4593d88bdcc106d9cc30a1f1956aa6382267539cb9f0aa3472f9cc4ef781b4200402b8d04a7eb156ba9fab2075862aa0a39db1f49a8f6228582e9a7c5bbfc2482ca6dc12a4f9dcbe029a00000000000100000000000018010000050000008556344ede67b620e1f1d103e13308895ac4fcfd6e325b11d18e4b15d8f8a01dc0731fea1ff26241d56f0560be7b7326421485bbd0c68164d222d0255b8e8b092f17803b9bc2a084babc953518681506e8e7506e2ce62b67de62f402cffcc42fa0bca3ede4f33a34d86918d322aef247344f68548b6e26518b419c362d39863ee18ab8391b8594d96a26bed80a651f4aa5bc66075187ca8c745bce260e026a40be9a5eca53bc863d67d3a56d923dfbc7770aee11acc33a07a63ea3a77e3039fd1aec2accf3b5afc7488c88a8cb736ccc61157995d3429cd4ac0ce96617b08eb138282fa75961d14ae347001dabaff87dd109623ccebe6fc5396a3655f91c6eacf59c083c68e31e85045bbaabdf2298dbfba1f7e6c37a74bf91e320263cb78ab9c427bdd2a2e3c7decd87ecd724dacf199320c84930dfe6d6a4a46ccc83a2deb4383f2e9ee8932cd64bffa6b4f987fe3d0377500f79d0e188ced90806cdda4aec44442cb3443fa46ba3d059d7348e266a6511fa09a76495d7193891f4a8e60249570cefcce36f03808dfe9b94e63e"], 0x12b8}}, {{&(0x7f00000018c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @broadcast}, 0x3, 0x0, 0x0, 0x4}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001940)="0d599296b1bd15b32e8a6854c1526817c58f50b93bfbc37973dada5b7237f329adeb11353c08e023d30a370004cb9c12fb4ca24e45d44d26e31147ee4f82ab28d36687d644311a2a8600fb87f4d7facecd650ca9e1ab85f36973c351adba59eafe1082e8c18dc5b9f47d9993cd162ea597567f76cbc5c4068a80416d6b08d80be92f05312279430a58427a1652a8", 0x8e}, {&(0x7f0000001a00)="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", 0x1000}, {&(0x7f0000002a00)="cd66efae1a52dd1c399e609e937be86f1d9dea3adb40677423c084c529a38d119659c845b1ba7154ffbeef494852d108aec19194dd15ef01a01e77a0b60b02490f8bb3573a1a6fa012110aeec49a161ac1832fd9c3f76e2d46a881eae59385b1c14a6f50a64aadf80d02c11f9274f398b34de28282cfe47c56a8ad5caed6", 0x7e}, {&(0x7f0000002a80)="18ce20bfffb20f34b01862fadf0e3b178c7853691f06b8f481e9747efe06d833e5113b7ef7a09412e67ba0a8da7796d2a473ad97b3abb26cbbbb7c4551743b1dd5c03748f453e0ce3cfa5e9849bd830df1b17f2c", 0x54}], 0x4}}, {{&(0x7f0000002b00)=@xdp={0x2c, 0x5, r6, 0x31}, 0x80, &(0x7f0000000280)=[{&(0x7f0000002b80)="9fc98cdb490febf2173fbe144c1f5643808bc1b4a81a5b188cfce675462fcbdcdcf083974a11efd602ef38434b1d39cdcebef8ce7f98d47f64ac9e134fe1e8e4f3d5470d58f2a2f4d0a716e508d2f69ac912b49a285eed728e62d485603f5244500cd5f802ec8bdb11d8708b09c5aa63d207891f0082e2ca20a996a2102ac9cea780", 0x82}, {&(0x7f0000002c40)="fd9bb96b4686834417633860fcb812cb9321c18a66dde6e25e27a47009b83a7011eabaa8388eb53b639afead956e66d5cede8e634a20596f98ce4b97377a252800590b74808b5cc5afd9c55c88c76223b889a69d6c250a5dc23889849e25f8f4fc8248cfb3afc322896d6dade797034047ced2f01cad239d2af23ff0ed6d703fe5ca93e90e0a056153c2736d14152edf61b8eb64e8da200f48c10fb7f511a243d3e6d23a1563dd675aafc76cce", 0xad}], 0x2, &(0x7f0000002d00)=[{0x10, 0xf4, 0x7}, {0x78, 0x101, 0x1, "5b76159b0ebf285480e2f836e9be18df561afe84a4115a21ad592880fb7e6e5cbd30f2eef91c2b0f4cf355df609c4bb800ae5498eeff5e44a211d45c1f8bdbe4b0f8a4da9d0abb59a4e0c6757c6c32380c32311aea95e8cfdef0e6aeea77c4a1def0a6"}, {0xb0, 0x10d, 0x2, "1543dfc0a41bd9b634e13316b2685316720529024a2cd01838ec2b4fab6b2d5035becad1a5eabe7f352a737a35f20e74ec974893b3a957758d2b38865e44d805fb21a56d499837dfc5097deb57b4d100d6b773ab030715f9e8a1ce1dab06fdb64ad5366c7096b00f79a6fe647f9da919bb0dffc17893e1b891f56ab4b43906539811c38d106264bcbc9c31443940a2970ba26412853baab8e523"}, {0x90, 0x102, 0x5, "b78fa298f5356e834cbed4266d5662f045f00074dc54a63ee727f73ef34ceef491af579b982f7af034d749b5a8aaa4aaa3a3243f04e4661799ab9e6ed42603439d6a323c728f1b98f724178251643524980d42f25a21f2948854b8b67496c524c0bac7a1cfd3c1759788f6e3b662f0dd5b5e86203db8264a79ebc84fcf84"}, {0xa0, 0x110, 0x4, "7650db36086f2edbbc6093f60dea66d715349fa4e2526d1772420da195e69ad155aadb1080214aa5c6550cb76b22cf2dc41d1159c839da2c34a9a4821ef3ff9156348a9bdc42ca32efb96664bf3cc987d2ed4b90b1bf4e46904a84fd65b59294a6f429f4c10851a857a44c73c6c2fd8407acadb7ad3982c5ca71a092920633714d95cbc747a1a52c65"}], 0x268}}, {{&(0x7f0000002f80)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000003000)="6a4e21ee80bc1a060267ed2e3e7603bd350f5afbea7f5038f3035610d0ab44ed3e1bca331c7114376843ea4d1e388279593879f165c610fe902d0ed59a31bb4f221db2544d7cce4cbd084f3724d054f516aeb4e4ccde1fb5cb", 0x59}, {&(0x7f0000003080)="2f6f629f31f44c867e825b381fd50b542ab434c960fea9c1f24fc3af50eccd4868407c600dd64b29dfdcc956bdc31e166984305dbd6a7b3d52e0b4541fb844f05460e1efc1a00c41999e3882951733835ff13b245804c1dd6f4a42aafc8484c059a614701dad389b8e33b6ff79e1613728fa5202f0e7c011289d3cf1d97ff9251566769b408e84117d44ad5539d8ad836e20", 0x92}, {&(0x7f0000003140)="e06b88346124df784a4c159c7d0e16c31599435ef9371b66dc2de7b0fe0690ed4c06b3e3ea71cf3f09ba8540020314209acc16971cc48a78959b62b335bdca29e8d3b05745fd9a4c3979e9af76b63a08fbd06e26d34a5cbc65547b2bfd21013f23928fa8f3bab573b447438312c5e5a56e494c1347cf548d142c913cd41a06425633516ae599f4e4be44df7b2df8d234933a1b510ee7bbd4686e1fad9d64146e4fc9a54bd27151ab767992ad2ea8f118850b4a1114564cdd169bfb52453d3d4d48c049f9bfe9b16d5e670308", 0xcc}], 0x3, &(0x7f0000003280)=[{0xa0, 0xff, 0x7fffffff, "308882d0d1b1a44686f40acb331986448a9511c544fd8855f8c36e919bb48f7a46600c3df14d45ef344c7172724a3275bc484d19307163897c33f27b1403e6285867b0fdd0297a597f28800a08b16ddea6fe4596db714a6b69757f18c369fd7b8e91aa5ab96c0e93d995a1cb36254d489c35fa883bc97b66b68ab64b301700c08b55a31cc4d2b3cb41c29c7d6f"}, {0x28, 0x11, 0x3, "124cc3fabd1c60e285b987d0fbf5ff6a34"}, {0x98, 0x29, 0x2, "c158220c8a50c37f1c0137ce0b6217fea7510aad849fe2620c78e9e23d095069ec873221a41622191f2e5afbad9e630124bf9fcc69d72930c921c4c6a9cb6ab5e46f319ace3fcb54f8098778b291b83df90e5ddad22e07c0ed24a5c82122cdace88fa71cdb84234f4bc78f5130efc8bbf3cf2fc03adb36ad178e49e0a5e4da284f"}], 0x160}}, {{&(0x7f0000003400)=@isdn={0x22, 0x3f, 0x80, 0x9, 0x8}, 0x80, &(0x7f0000003880)=[{&(0x7f0000003480)="3fcf6dd7ceab09c4088c3527faec6ae995d8f900357d9b837208a5675897bd8e13e2042debe83d7e8bd787eadaa4e4a8bb6981bbc769a652afc8db6a2f967c2d9d3e9a6c66315e1511c579de025a9dceb952c6d444d85615f5fcbd9339c6d7e62288bd9cf095c216015090eef758f247d732fa4beb41f6bce195c01a683bb1b8bbd9ce38b04dda1cab732cbec9de3e5e6906726a2cabc4b14d0adccf92e3a13f30b029e7c92de9197d1ff8845735f157e69f85bc27c665eb39246549dcc7cb572ebfb0", 0xc3}, {&(0x7f0000003580)="97f5243cee7bc18c13e8cebf32c156df70c2265694a1f73d09e4de1d71ac0c543a0b4bef8cfaf4a4e5dbf82918659d159e46889e781e3c65f1aad6c114579eb65aa94b10a877d9c7b926f3c7523da87f4f4f4afd96015a1472ae742be9be453206f17c367737020d2738d573ee411e382e2cb2d849f95d25d65a6504b69aeb38cc30cee2ba567e327ca58504ee983d8fabb794394684e6b4c77b75b8975cafb622", 0xa1}, {&(0x7f0000003640)="7bd557a3c35274b43217555da455ef97f15b251ca63be30d2d8387b5bc5c736c4b0c4a803c7243107deafc8200a65d6e0fa92eb1e6911ead5efeba8ebdd6fd110499ecf3c527f8b78124ddc9971de5e29ebbdc3b5aee946760ddde3451b5afb8406780aad22e6f2c6602", 0x6a}, {&(0x7f00000036c0)="37d786496765a4ca1c3837acbaf3778386e44076c3fbf2eaa748e041304cd9be12347cb9aebe", 0x26}, {&(0x7f0000003700)="46ae0d889637e4dd12dd9781a5b418836214bb22b4788888b00cfecc1ca2e8dcf3a0b0e2e4c45bd4739a495e91ac4561772f1fb9ed056de128294e0581e3b20b12fec3bc1e1bc70ebb1ea7508403f368c15d725cb8dd889f048dc0a95617f6bc75f3dcbd434654b444ca604071509e5d546eb8ccda4a3a95ca24d2d36d1431d73479e21d0092db2f2c7782cc0009c561a464c9f4ec2e076b244ed67ba2c6aed9b0de7de31b5a98126bd74c1204cb809f", 0xb0}, {&(0x7f00000037c0)="a3d710a4b2d2bba43e60c3dae8afb55472ba9fdf996e75d19514ce8232218fb34c1fd4f1324a70d2a9a232628d083d641750f5f7d1aa04451246a3033423aaa2d965b728d090c11009a69c311b5871c70b5e36f23b312d0111e3af13334fcc6a354ffb231d0177267348710c46431323e9c44b6eacc59f88bf59308ab79c266107", 0x81}], 0x6}}, {{&(0x7f0000003900)=@nfc_llcp={0x27, 0x0, 0x1, 0x4, 0x4, 0x1, "60d2bd624fad333ce4b676aeca2ad6b410121387d4b0ac0599710f3de984c730843c93969fb2dbccbb55e3ff12883e2dfeffe13cb6cc415cd4e1954d074b23", 0x1b}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000003980)="665bffb52db95fd64ddfa554ad1e6c34de9f76ba73c7122d4bb15c33c7cb47f5587b423059fad2231d4e", 0x2a}, {&(0x7f00000039c0)="24164e9de2cda9cf5ef5cf3060d1f6b2ba0a66404e123b01db30659f967c1c2adea4a69e85276199519b5540baad74c32c3521e181a95c67228e26e2955bfcfc6cc42ad3da95a5d4f653d81dd0e9dd4c3e9da89bb0aa4869a0b0d2d642dea71d1aa07b73aa163dc5ea8245320e07ed64244cc3ef48e0557f45db6ac2a1cb36328742d903c1192904cc3b45358b62e1fef718055942b4fa97b69a742c44b4e298cefa10dfe6f968899b9b37e0ae79223c5aeb318a34a9154998670939fb395e689a457642a7f71b046cc364df1a46deb894a060050edfd91b1d3d7aacb0c6f5e3e6", 0xe1}, {&(0x7f0000003ac0)="d9b7b892b55863640e89fb6ca3dae127ba5cb900c87c56f8acf2cd8365289c6411481c7b93909c47ef22fe1013fb4bc87f00cd3bab8e2147b22dd100771caecb0943fe69094755b376111ee3d8b854841b6843bc3263072d8dcdb14043cc19076324806d0bd461e186d3bbc0d75574e0274c4f45b490c24eee66fdaccf71bf374ffdc91d5bd3fb42", 0x88}], 0x3, &(0x7f0000003bc0)=[{0x1010, 0x101, 0x3f, "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"}, {0xc0, 0x114, 0x2, "5cb778866f7280eff714801ee9a27ddea73c0a534df4f306b14b29fe92a95cbc014920bcf6b3de476098798e67f2b560ecca73619d39cf189d43a39c50c32cc77bdfb5b1d9dd773cd0aac324a066b5f11adc66db639fa1965da2d61e638e3730e5e8a4cdd51a626a101030cb5ac76c59e20cf2cb6cac165e349b39df79c3f5bc19768080b970f456760be571e6940ffa23e24112219d58bff0a6358d0566b46ebd6cc05d2829951ebca7e20f77a4"}, {0x100, 0x117, 0x7c93fac5, "893de264e2010210faac39e26050d68e7db2de1134422c7fb33c1fc5434bab8adebfbfc49f3e9e318ec596fdbb123271c04d9d2d8855eac401154460be462fe2f4f49eb89334232f9fe36b4634e4f19b05235dfd953a2e971486e80890b94fa42853a969221db752d9810948c5aa3ecadfead480d533234f30995773276cae19b70e33d751a52f7ce9acf74fb4e6696f02e701b06fe32627fa572df54690d7122cad1e55ff986ad452157d6ccc01278e6aa42adaea6a73ea23401bc2e4969ab3bc56306c31a3d09c860059041a2502adf6b4cf5d3f06c7f58bea4b1fd9203756864067097efc89bb5abf1c3167a0"}, {0x78, 0x116, 0x8, "aa5ecf7bab72a1fd1a8a35d04f21c10e669761d10b1c4ced9019a21b5f1d606d280c421cadcd7349d70039613b5e54abbf647c68bb01c17ecb92e1a8851f8cac1848ac0793fac9c3ed01446711a80b252f4417423c2a27de97d979b6397394ea3ca3"}, {0xe8, 0x88, 0xf, "f2a65a1e969aa18d9f654fa7e34edce83b638c4daf5b5f34f818edd062d6d61df7c2151c77554228ccc49bb897ab95dd401ca62a3a4b301da6577ed4955d68e86995997b47240ac6aec1b5aa8cc69209ebb7c9451b2fb8f5ffb938c6602b240a266a9d02877b5a5e2401a572b71d36a5056ed55518f748bdc15370237b4b3df4b7a0d303261cca9c45d7bc3b3282e6e4d8ed5bfc5579d43dbe391d3715555bc887907c0cc8df8cdc3dfcc586e418dc41ec2ebb7cf6966c44fbc5b085d6bb92df9e1ade1d63b828933f59dee7fb5d447c71754818246c0f"}, {0xe8, 0x103, 0x71, "ad6769ae760a4167bae73f2f33499053859faeeaea19b01b793e5cb73b838e9675859a201bde1711bfabb7627757a6e27ae3dae64c187e240f6b828c7a1ac928234a6b6d91a5b9668bfdeb2bc1e1f8d75a7d369b710ac1b839712adfb80ce0ff11706f3022b9ab7adbd12b98977f7d1c8283d7de5a6ad6145e13aee3495cc438d38ee1d9f6bfdea30c47355e485a5603f575aee70977db10d84a08c36522ee1acca5cdddb12dc43a72d4eb2e641cb2f800f86caca2af7185db90311b50b92a03d869227bfbcc29dd4712ffbfcfb2abd097cead76268f"}], 0x1418}}, {{0x0, 0x0, &(0x7f00000054c0)=[{&(0x7f0000005000)="acdd732f148010bb6ff2f27980e315c25ad42a04293c3cd95fe9c59a46f17959cd38cc34644a8c0ce5808eab54f22459d0a72712a62912db507324cc9c8a3760f042af28b556abca36d7a9cabe959d7a17a9ac9bd99133679365b6184b21e616b622170a5ee39fdba8cbe31105b7f1a218273212d42ade66365493bbaaf30e9336e6113def9cb960c350a29a31efaa9e74a3488339e1b5bfc9819a44fefa1c028b3dda9cb31d24647dbfba7df7adf0961eace812e82eed15d20ead", 0xbb}, {&(0x7f00000050c0)="1d52560a70737b4ab8d7b4cd1394a884dfe60481c8195518d5ea8308ab98d0d03cd397fab62d3f2502335a63651c11a1223a0608826f1f0821177ab404f03d73360ae6394fad5813290b9b28356d0b1329bbc11ab3c8470bc8ce7cc26315f5cb200a7afaa82d2a4506d91e37a600ccc8d85e31bb93c98ade1ec9ca1e9dc6c0a94dece0602434da85b6ee194c39abb0b567794d1ffd2c1e4bc3efc6fc882ea07a277d183187c9fe92bac6a7ed439d14a86562882c6a2f2fcaf290696eb06312a4cc371fcdfde0793dd9557077bc4da2e92242dcc73a96dd9e87a479736c1bd88ea7e621", 0xe3}, {&(0x7f00000051c0)="08d301d09ee19359efb65c935a311f547f8d03717cfce3c9e97a396ab1e7d40b5d549b7fbb8b7539abf10ede344fe2caf1b1e62ae175864c06d36498f2e481da89c448f8a42f838769fb68d353151738b116045d9e3177c330bf846b96cb4055fe00e118d75858113773d27e643c3c442307fa338376390eb713d78eddaf357f6e15e97afb40fcd5e9e0f984262cf3a92597f1a88990bd8190fde329175cbe6c32ad591996f4fbe5d9bf691c9f8c31bb0388fcdd7e14a02e9ec6711456c0", 0xbe}, {&(0x7f0000005280)="2f0732e2b8760812b63c81524236b1053b6b19b06c87898f8d02339b5461cf79bbd6d711f819055537fd9dde47dfa30a8b1929c8954358d8d94a13848cefefed8869be7c233e2bb17608be90ce9e13503c3b953554fadf7ad6cc13b5713c7d371f69ac3c600de881db1d5291e3f9a9363cbad2d34e461f2cba8445c5458cd167ab12a97a8310b73cb171d83b3b67babc3e8412793e74818286fef3112db1ca55d57b811c58af6f702056a3187f", 0xad}, {&(0x7f0000005340)="eb16b32784065ef455c52889d4b0b78fdbdeaf01970be19297fadb10a6c98a9843006c82a7d9cda526b4917fdd5a32ce28ca4c0ceeacce22b338ea319accde7454c5d4ce9be4395910c94f55ee3a89ce2c949706b381ab42c881322e0a89961e76fd84f545ce6bd333c0b77cfa6f60f60c158a51576c545267ec33ee2e1debae9885a1", 0x83}, {&(0x7f0000005400)="daafa324defd037bba29c07a33760240f40e4052973381b80d3bb0782fba0451dea5d9f320f017979ca50a02e28279f20e87e039543f20a16b472aafd31aedc31f8d4e123d1f8fc373e70f912a4a8f9ce9094ffd610cffdc6a6fee4f8c1de79fe946e39793db75f9708ebd0f23f30d976437df195824308231585946f87eff2299eaaa8a078bec8b3b7d1f6ad23f9cbeb2500334fa776b9fa1697505bf2587e311b5f72fecbf9281524fe03ca49b062f43c80efa07a796150b49d285697e83", 0xbf}], 0x6}}], 0x7, 0x40000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005700)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB="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"/357], 0x44}, 0x1, 0xf000000}, 0x0) 12:18:31 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x8800, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xbd5b0300}, 0x0) 12:18:31 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="00000000db1169de0f76bfd94b00000000006b13ad4270667e95a4402534993442"]}) 12:18:31 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)=ANY=[@ANYRES16=r1]}) [ 3301.229641] audit: type=1804 audit(1596370711.172:6618): pid=13325 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17430 res=1 [ 3301.258860] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:31 executing program 2: ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'veth0_to_team\x00'}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8927, &(0x7f0000000000)) 12:18:31 executing program 3: syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}}}, 0xb) 12:18:31 executing program 2: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'rose0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\f']}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x89a0, &(0x7f0000000000)) 12:18:31 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0xff01, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3301.538662] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3301.603749] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3301.680201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:18:31 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:18:31 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a00c80001"], 0x22) 12:18:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000200)={0x4, 0x9, "001000"}) 12:18:31 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0xff07, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:18:31 executing program 4: pipe(&(0x7f0000000100)) socket(0x1, 0x803, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='/dev/hwrng\x00'}, 0x10) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="060000000000000000000000000004000000000000000000010000000000000000000000000031283dc62b813aea95fb000001000000000000008400000000000000000000000000000000000000000000008000"/98]) pipe2(&(0x7f0000000080), 0x80000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x800, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1ff) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="c1ff442bb00600000000000000ef07a76bd007ff1000ffdbdf2500effd1b6a0000900000000000b8d16d9ee604c4d4398266a13fd561136f2d3fd42b8a7b4dea0c8602bcea552743dd1f197d61df6a3aad3c2aa93baebd8382e580cf13f2ce0c2292f079d0412bd241ce204586018878288c73242f4ae981353666a634befc24355ed9a641c740dcdbed6eb63d18d520bb094bca5e7e39a1d3de31ed6305f17d6bc66ccad63c0b71b2b9c0234dade8470532efcb5b1361cc8d0939b8d13460d1433ac2153c54e05696c0f45123a5dad0", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000300000008000d0000040000"], 0x44}, 0x1, 0xf000000}, 0x8001) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = add_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$link(0x8, r5, r6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000040)={0x0, 'bond_slave_1\x00', {0x1}, 0xb6}) 12:18:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xbe5b0300}, 0x0) [ 3302.067051] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 3302.076354] CPU: 1 PID: 7930 Comm: kworker/u5:5 Not tainted 4.19.136-syzkaller #0 [ 3302.084077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3302.093561] Workqueue: hci3 hci_rx_work [ 3302.097542] Call Trace: [ 3302.100135] dump_stack+0x1fc/0x2fe [ 3302.103775] sysfs_warn_dup.cold+0x1c/0x2d [ 3302.108103] sysfs_create_dir_ns+0x228/0x280 [ 3302.112519] ? sysfs_create_mount_point+0xb0/0xb0 [ 3302.117369] ? lock_acquire+0x170/0x3c0 [ 3302.121347] ? kobject_add_internal+0x134/0x8a0 [ 3302.121719] audit: type=1804 audit(1596370712.072:6619): pid=13398 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17553 res=1 [ 3302.126011] ? pointer+0x850/0x850 [ 3302.126047] ? do_raw_spin_unlock+0x171/0x230 [ 3302.126062] kobject_add_internal+0x296/0x8a0 [ 3302.126080] kobject_add+0x150/0x1c0 [ 3302.126093] ? kset_create_and_add+0x1a0/0x1a0 [ 3302.126111] ? device_add+0xdbf/0x1610 [ 3302.126125] ? __lockdep_init_map+0x100/0x5a0 [ 3302.126138] ? root_device_release+0x20/0x20 [ 3302.126149] ? device_add+0x349/0x1610 [ 3302.126164] device_add+0x368/0x1610 [ 3302.186425] ? device_check_offline+0x280/0x280 [ 3302.191170] ? hci_debugfs_create_conn+0x179/0x1f0 [ 3302.196135] ? hci_debugfs_create_le+0x720/0x720 [ 3302.200942] hci_conn_add_sysfs+0x84/0xe0 [ 3302.205133] le_conn_complete_evt+0x78d/0x1730 [ 3302.209725] ? hci_check_pending_name+0x590/0x590 [ 3302.214570] ? debug_check_no_obj_freed+0x201/0x482 [ 3302.219592] hci_le_meta_evt+0x738/0x39c0 [ 3302.223758] ? __lock_acquire+0x6de/0x3ff0 [ 3302.228000] ? read_enc_key_size_complete+0xb90/0xb90 [ 3302.229840] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3302.233187] ? __lock_acquire+0x6de/0x3ff0 [ 3302.233207] ? __lock_acquire+0x6de/0x3ff0 [ 3302.233229] hci_event_packet+0x1a29/0x858f [ 3302.233245] ? mark_held_locks+0xf0/0xf0 [ 3302.233257] ? __lock_acquire+0x6de/0x3ff0 [ 3302.233272] ? hci_cmd_complete_evt+0xb5e0/0xb5e0 [ 3302.233285] ? update_curr+0x3b9/0x870 [ 3302.233301] ? debug_object_deactivate+0x1f9/0x2e0 [ 3302.233327] ? mark_held_locks+0xa6/0xf0 [ 3302.233343] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3302.233357] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3302.233375] hci_rx_work+0x46b/0xa90 [ 3302.292748] process_one_work+0x864/0x1570 [ 3302.296998] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 3302.301770] worker_thread+0x64c/0x1130 [ 3302.305759] ? __kthread_parkme+0xfd/0x1b0 [ 3302.309994] ? process_one_work+0x1570/0x1570 [ 3302.314494] kthread+0x30b/0x410 12:18:32 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:32 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x0, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu=0x5}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='xfrm0\x00') ioctl$sock_SIOCGIFBR(r0, 0x89f0, &(0x7f0000000180)=@get={0x1, 0x0}) 12:18:32 executing program 3: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e68020300000000010000001c9851dc03683e4773a596b53caef2a84ecd9ff101711b7c3ac4d027f5060200ffffffffffff17a57a3cc193e371e128db010401ffffffffffff15938888e73c9f5ff0e7f9d0ea4f"], 0x6b) [ 3302.317859] ? kthread_park+0x180/0x180 [ 3302.321839] ret_from_fork+0x24/0x30 [ 3302.336496] kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 3302.349398] Bluetooth: hci3: failed to register connection device [ 3302.356465] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 3302.366764] CPU: 1 PID: 7930 Comm: kworker/u5:5 Not tainted 4.19.136-syzkaller #0 [ 3302.374391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3302.383747] Workqueue: hci3 hci_rx_work [ 3302.387716] Call Trace: [ 3302.390306] dump_stack+0x1fc/0x2fe [ 3302.393951] sysfs_warn_dup.cold+0x1c/0x2d [ 3302.398190] sysfs_create_dir_ns+0x228/0x280 [ 3302.402597] ? sysfs_create_mount_point+0xb0/0xb0 [ 3302.407427] ? lock_acquire+0x170/0x3c0 [ 3302.411387] ? kobject_add_internal+0x134/0x8a0 [ 3302.416040] ? pointer+0x850/0x850 [ 3302.419566] ? do_raw_spin_unlock+0x171/0x230 [ 3302.424059] kobject_add_internal+0x296/0x8a0 [ 3302.428566] kobject_add+0x150/0x1c0 [ 3302.432286] ? kset_create_and_add+0x1a0/0x1a0 [ 3302.436876] ? device_add+0xdbf/0x1610 [ 3302.440768] ? __lockdep_init_map+0x100/0x5a0 [ 3302.445262] ? root_device_release+0x20/0x20 [ 3302.449686] ? device_add+0x349/0x1610 [ 3302.453581] device_add+0x368/0x1610 [ 3302.457299] ? device_check_offline+0x280/0x280 [ 3302.461970] ? hci_debugfs_create_conn+0x179/0x1f0 [ 3302.466904] ? hci_debugfs_create_le+0x720/0x720 [ 3302.471663] hci_conn_add_sysfs+0x84/0xe0 [ 3302.475814] le_conn_complete_evt+0x78d/0x1730 [ 3302.480400] ? hci_check_pending_name+0x590/0x590 [ 3302.485247] ? debug_check_no_obj_freed+0x201/0x482 [ 3302.490276] hci_le_meta_evt+0x738/0x39c0 [ 3302.494437] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3302.499551] ? debug_check_no_obj_freed+0x201/0x482 [ 3302.504565] ? check_preemption_disabled+0x41/0x280 [ 3302.509584] ? read_enc_key_size_complete+0xb90/0xb90 [ 3302.514779] ? kfree_skbmem+0xc1/0x140 [ 3302.518667] ? hci_event_packet+0x561/0x858f [ 3302.523083] ? __lock_acquire+0x6de/0x3ff0 [ 3302.527328] hci_event_packet+0x1a29/0x858f [ 3302.531653] ? mark_held_locks+0xf0/0xf0 [ 3302.535716] ? __lock_acquire+0x6de/0x3ff0 [ 3302.539955] ? hci_cmd_complete_evt+0xb5e0/0xb5e0 [ 3302.544812] ? update_curr+0x3b9/0x870 [ 3302.548705] ? debug_object_deactivate+0x1f9/0x2e0 [ 3302.553650] ? mark_held_locks+0xa6/0xf0 [ 3302.557713] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3302.562826] ? lockdep_hardirqs_on+0x3a8/0x5c0 12:18:32 executing program 3: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0406"], 0x2) 12:18:32 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0xff0f, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3302.567417] hci_rx_work+0x46b/0xa90 [ 3302.571140] process_one_work+0x864/0x1570 [ 3302.575388] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 3302.580071] worker_thread+0x64c/0x1130 [ 3302.584055] ? __kthread_parkme+0xfd/0x1b0 [ 3302.588292] ? process_one_work+0x1570/0x1570 [ 3302.592791] kthread+0x30b/0x410 [ 3302.596162] ? kthread_park+0x180/0x180 [ 3302.600144] ret_from_fork+0x24/0x30 [ 3302.615291] kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 3302.645671] Bluetooth: hci3: failed to register connection device [ 3302.653241] Bluetooth: hci3: advertising data len corrected [ 3302.659220] Bluetooth: hci3: advertising data len corrected 12:18:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x9) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) [ 3302.665444] Bluetooth: hci3: Dropping invalid advertising data [ 3302.671871] Bluetooth: hci3: advertising data len corrected [ 3302.677938] Bluetooth: hci3: advertising data len corrected [ 3302.684881] Bluetooth: hci3: Dropping invalid advertising data [ 3302.794855] bond2444: making interface veth8165 the new active one [ 3302.803193] bond2444: Enslaving veth8165 as an active interface with an up link [ 3302.823318] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:32 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:18:32 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0b06c80007"], 0xe) 12:18:32 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000040)={0x1, 0x106dc0ae8d80397d, [0x6, 0x2, 0x8, 0x539c05cb, 0x0, 0xc7, 0x1, 0x7]}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:32 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ef9fd0b20"], 0x7) 12:18:32 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x2}]) [ 3303.037086] audit: type=1804 audit(1596370712.982:6620): pid=13485 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17553 res=1 [ 3303.105310] bond2444: Enslaving veth8167 as a backup interface with an up link 12:18:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xbf5b0300}, 0x0) 12:18:33 executing program 2: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x15, 0x0, @none, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @none}]}}}}, 0x1d) 12:18:33 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFBR(r0, 0x89a1, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='veth0_virt_wifi\x00'}) 12:18:33 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x3}]) 12:18:33 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0xf000000}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x100, 0x70bd27, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44880}, 0x4) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) open(&(0x7f0000001400)='./file0\x00', 0x420000, 0x1f3) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r7}, 0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r10}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={r10, 0x1000, "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"}, &(0x7f00000001c0)=0x1008) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000001340)={r7, 0x1, 0x5, 0x4, 0x3, 0x8, 0x1, 0x4, {r11, @in6={{0xa, 0x4e20, 0x100, @local, 0x3}}, 0x7ff, 0x8, 0x3, 0x800, 0x7f}}, &(0x7f0000000280)=0xb0) 12:18:33 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000000)=0x88) 12:18:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5450, 0x0) [ 3303.263585] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3303.355871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=13517 comm=syz-executor.4 [ 3303.381724] sctp: [Deprecated]: syz-executor.4 (pid 13517) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3303.381724] Use struct sctp_sack_info instead [ 3303.423030] sctp: [Deprecated]: syz-executor.4 (pid 13517) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3303.423030] Use struct sctp_sack_info instead [ 3303.455183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=13505 comm=syz-executor.4 [ 3303.485019] sctp: [Deprecated]: syz-executor.4 (pid 13517) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3303.485019] Use struct sctp_sack_info instead [ 3303.505334] sctp: [Deprecated]: syz-executor.4 (pid 13517) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3303.505334] Use struct sctp_sack_info instead [ 3303.635943] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:33 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:18:33 executing program 2: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0xa64cac4b5a8c1493}) 12:18:33 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e060cf6"], 0x9) 12:18:33 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x4}]) 12:18:33 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x22, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304000000000800000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0xf000000}, 0x0) 12:18:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xc05b0300}, 0x0) 12:18:33 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f0000001340)={0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', r2}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'ip_vti0\x00', {0x2, 0x4e21, @remote}}) 12:18:33 executing program 3: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @any, "b18e32e380ba39c42805ffd0b06da32e32dbe706a37f488c23ed583fdcb906d4145709fecd55c40518d0c1b83aaf0f017d6a726a0a53363f044e34459ea05907f07ec66e98eb7e8f9044020d12558fc92dd39c774e1b6c8aae742e25b8358d8468e43b87ef57eeac88419bd782967a6aac888284c4a242f67f34eb599ae0c810bd726fb9c36d8d7307c8926d43584353d87a03c6e6e9f288acc40e99bb01c6ab26964b2ad67a4d51d38d3856aaf05ed6c18da854b21ebca6133aee95ef58e54c6b2907b344dcb391993ff4a69a7a56f5dc1db28f644863c5585907d86077474cb908231a64e9f84484adaf068b293c368e550ce1ed760056"}}}, 0x102) [ 3303.917206] audit: type=1804 audit(1596370713.862:6621): pid=13550 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17505 res=1 [ 3303.929084] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:33 executing program 4: pipe(&(0x7f0000000100)) socket(0x1, 0x803, 0x0) r0 = gettid() tkill(r0, 0x31) syz_open_procfs(r0, &(0x7f0000000000)='net/nf_conntrack_expect\x00') r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100a0001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x2c, 0x66, 0x0, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x57ca9f6e86fd1cf6, 0x3}, {0x5, 0x2}}, [{0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001800030400e2ff000600000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0xf000000}, 0x0) 12:18:34 executing program 2: syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) 12:18:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x3, 0x0, 0x0, 0xfffffffc}]}, 0x10) 12:18:34 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x5}]) [ 3304.249427] bond2230: making interface veth8171 the new active one [ 3304.259882] bond2230: Enslaving veth8171 as an active interface with an up link [ 3304.272901] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3304.355285] bond2230: Enslaving veth8173 as a backup interface with an up link 12:18:34 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:18:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000001300)=[{0x20, 0x0, 0x0, 0x400000}, {0x6}]}, 0x10) 12:18:34 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket(0x10, 0x3, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x800) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_deladdr={0x40, 0x15, 0x200, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x10, 0xfe, r3}, [@IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, [], 0x1}}, @IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x40}, 0x1, 0xf000000}, 0x0) 12:18:34 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, &(0x7f0000001300)}, 0x10) 12:18:34 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x8}]) 12:18:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xc15b0300}, 0x0) 12:18:34 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2e481, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x27, 0x3, 0x2080008) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0xf000000}, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f00000000c0)=0x8001) 12:18:34 executing program 2: syz_emit_vhci(&(0x7f0000000980)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x5}}}, 0x7) 12:18:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000001340)={0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netpci0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'rose0\x00', r1}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89a1, &(0x7f0000000040)={'sit0\x00', @ifru_flags=0x4000}) [ 3304.848266] audit: type=1804 audit(1596370714.792:6622): pid=13603 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17409 res=1 12:18:34 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xf}]) 12:18:34 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8981, &(0x7f00000001c0)={0x2, 'vlan0\x00'}) 12:18:34 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0f0100c9aaaa01fd6ae9679f6a"], 0x22) [ 3305.094649] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:43721' [ 3305.103743] CPU: 1 PID: 7930 Comm: kworker/u5:5 Not tainted 4.19.136-syzkaller #0 [ 3305.111362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3305.120722] Workqueue: hci3 hci_rx_work [ 3305.124699] Call Trace: [ 3305.127290] dump_stack+0x1fc/0x2fe [ 3305.130927] sysfs_warn_dup.cold+0x1c/0x2d [ 3305.135173] sysfs_create_dir_ns+0x228/0x280 [ 3305.139585] ? sysfs_create_mount_point+0xb0/0xb0 [ 3305.144436] ? lock_acquire+0x170/0x3c0 [ 3305.148415] ? kobject_add_internal+0x134/0x8a0 [ 3305.153090] ? pointer+0x850/0x850 [ 3305.156631] ? do_raw_spin_unlock+0x171/0x230 [ 3305.161128] kobject_add_internal+0x296/0x8a0 [ 3305.165630] kobject_add+0x150/0x1c0 [ 3305.169345] ? kset_create_and_add+0x1a0/0x1a0 [ 3305.173929] ? device_add+0xdbf/0x1610 [ 3305.177815] ? __lockdep_init_map+0x100/0x5a0 [ 3305.180366] bond2445: making interface veth8175 the new active one [ 3305.182306] ? root_device_release+0x20/0x20 [ 3305.182318] ? device_add+0x349/0x1610 [ 3305.182333] device_add+0x368/0x1610 [ 3305.182349] ? device_check_offline+0x280/0x280 [ 3305.182365] ? hci_debugfs_create_conn+0x179/0x1f0 [ 3305.182378] ? check_preemption_disabled+0x41/0x280 [ 3305.182389] ? hci_debugfs_create_le+0x720/0x720 [ 3305.182406] hci_conn_add_sysfs+0x84/0xe0 [ 3305.193870] bond2445: Enslaving veth8175 as an active interface with an up link [ 3305.197053] le_conn_complete_evt+0x78d/0x1730 [ 3305.197073] ? hci_check_pending_name+0x590/0x590 [ 3305.197086] ? debug_check_no_obj_freed+0x201/0x482 [ 3305.197105] hci_le_meta_evt+0x738/0x39c0 [ 3305.197123] ? __lock_acquire+0x6de/0x3ff0 [ 3305.197140] ? read_enc_key_size_complete+0xb90/0xb90 [ 3305.259648] ? __lock_acquire+0x6de/0x3ff0 [ 3305.263892] ? __lock_acquire+0x6de/0x3ff0 [ 3305.268143] hci_event_packet+0x1a29/0x858f [ 3305.272472] ? mark_held_locks+0xf0/0xf0 [ 3305.276534] ? __lock_acquire+0x6de/0x3ff0 [ 3305.280774] ? hci_cmd_complete_evt+0xb5e0/0xb5e0 [ 3305.285621] ? __update_load_avg_se+0x5ec/0xa00 [ 3305.290292] ? debug_object_deactivate+0x1f9/0x2e0 [ 3305.295243] ? mark_held_locks+0xa6/0xf0 [ 3305.299310] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3305.304417] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3305.309007] hci_rx_work+0x46b/0xa90 [ 3305.312729] process_one_work+0x864/0x1570 [ 3305.316967] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 3305.321676] worker_thread+0x64c/0x1130 [ 3305.325716] ? __kthread_parkme+0xfd/0x1b0 [ 3305.329955] ? process_one_work+0x1570/0x1570 [ 3305.334454] kthread+0x30b/0x410 [ 3305.337826] ? kthread_park+0x180/0x180 [ 3305.341799] ret_from_fork+0x24/0x30 [ 3305.349392] bond2445: Enslaving veth8177 as a backup interface with an up link [ 3305.361155] kobject_add_internal failed for hci3:43721 with -EEXIST, don't try to register things with the same name in the same directory. [ 3305.373989] Bluetooth: hci3: failed to register connection device 12:18:35 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:18:35 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1, 0x803, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r2, 0x0, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd6d}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x105801) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x78, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x78}}, 0x20044080) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r5, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4008000) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="74000087", @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf250800000008000800ffffffff08000c0003000000080002000700000008000700000000001400060000000000000000000000ffff6401010006000b000400000008000c0003000000080004000300000014000500ff020000000000000000000000000001"], 0x74}, 0x1, 0x0, 0x0, 0x91}, 0x8084) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB="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"], 0x44}, 0x1, 0xf000000}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0xff, 0x9}, @sack_perm, @sack_perm, @window={0x3, 0x4}, @window={0x3, 0x8, 0x7fff}, @mss={0x2, 0x7}, @timestamp, @sack_perm], 0x8) 12:18:35 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_mtu}) 12:18:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xc25b0300}, 0x0) 12:18:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000140)) 12:18:35 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x10}]) 12:18:35 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000001300)=[{0x3, 0x0, 0x1}, {0x2, 0x0, 0x7f}]}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x0, 'lo\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000100)={0x2, 'syzkaller1\x00', {0xfffffbfd}, 0x4}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x0, 'lo\x00'}) ioctl$FIONCLEX(r1, 0x5450) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'lo\x00'}) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x3f, &(0x7f00000001c0)=0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x0, 'lo\x00'}) ioctl$sock_ifreq(r3, 0x8995, &(0x7f0000000140)={'syz_tun\x00', @ifru_mtu=0x1000}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000040)={0x0, 'lo\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000000c0)={0x0, 'vlan0\x00', {0x2}, 0x4}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)=0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000040)={0x0, 'lo\x00'}) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000080)) 12:18:35 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'rose0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x1f}}) [ 3305.741667] validate_nla: 2 callbacks suppressed [ 3305.741674] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3305.754341] audit: type=1804 audit(1596370715.692:6623): pid=13694 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17697 res=1 12:18:35 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f0000000100)=""/113, 0x3}) 12:18:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) 12:18:35 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x88}]) 12:18:35 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ip6gretap0\x00'}) [ 3306.159626] bond2446: making interface veth8179 the new active one [ 3306.168200] bond2446: Enslaving veth8179 as an active interface with an up link [ 3306.189593] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3306.276856] bond2446: Enslaving veth8181 as a backup interface with an up link 12:18:36 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 12:18:36 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="200000005c000000db1e08c62e7d1a1c035c000029"]}) 12:18:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x800442d4, 0x0) 12:18:36 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x80000001}, 0x10, r4, r5}, 0x78) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x9, r4}, 0x8) r6 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000240)={0x9e0000, 0x47e4, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9a0901, 0x8, [], @value=0xffff}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@raw=[@generic={0x6, 0x0, 0x1, 0x0, 0xc9}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9b4b}], &(0x7f0000000040)='GPL\x00', 0x101, 0x5, &(0x7f00000000c0)=""/5, 0x40f00, 0xa, [], r1, 0xb, r2, 0x8, &(0x7f0000000180)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xb, 0x2, 0x3}, 0x10, r4, r7}, 0x78) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x11c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_CARRIER={0x5, 0x21, 0x3}, @IFLA_VFINFO_LIST={0xd8, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x100, 0x6886}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x81}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xc9b, 0x42}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x8, 0xec4, 0x80000001}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x543d, 0x20}}]}, {0x4}, {0x50, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0xa35}}, @IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x1}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x618, 0x2, 0x88a8}}, {0x14, 0x1, {0x6, 0x547, 0x4, 0x88a8}}]}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0x26ef}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x979, 0x6d892bae}}, @IFLA_VF_TRUST={0xc, 0x9, {0x101, 0x7ff}}]}]}]}, 0x11c}, 0x1, 0xf000000}, 0x0) 12:18:36 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x300}]) 12:18:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xc35b0300}, 0x0) 12:18:36 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) [ 3306.587023] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:36 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) [ 3306.647918] audit: type=1804 audit(1596370716.592:6624): pid=13777 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=17537 res=1 12:18:36 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f00000000c0), 0xe) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={[], 0x11}}, 0x8) getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 12:18:36 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x52}}}, 0xa) 12:18:36 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xff, 0x2) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:36 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x30d}]) [ 3306.970494] bond2447: making interface veth8183 the new active one [ 3306.990113] bond2447: Enslaving veth8183 as an active interface with an up link [ 3307.005241] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3307.103399] bond2447: Enslaving veth8185 as a backup interface with an up link 12:18:37 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 12:18:37 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 12:18:37 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x408}]) 12:18:37 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @aes128, 0x2, [], "91be8ce33126e801252d4f6c4340ff32"}) ioctl$sock_ifreq(r0, 0x89a0, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu}) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) 12:18:37 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440022791000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009001300076c616e0040000009000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0xf000000}, 0x0) 12:18:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xc3ffffff}, 0x0) 12:18:37 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4}, @l2cap_cid_le_signaling}, 0x9) 12:18:37 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x95, 0x95, 0x5, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "d3"}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @fwd, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0xb5}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 3307.478573] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3307.499380] audit: type=1804 audit(1596370717.442:6625): pid=13860 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16068 res=1 12:18:37 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024000f05deffff3f07a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x38, 0x2, [@TCA_RSVP_ACT={0x34, 0x6, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0x10, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', r6, 0x2f, 0x2, 0x1, 0x599f, 0x22, @loopback, @private0={0xfc, 0x0, [], 0x1}, 0x7, 0x8000, 0x6, 0x2}}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:37 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x500}]) [ 3307.760860] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3307.792427] ptrace attach of "/root/syz-executor.2"[13885] was attempted by "/root/syz-executor.2"[13886] 12:18:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xc45b0300}, 0x0) 12:18:37 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="01"]}) [ 3307.824344] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3307.910767] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3308.059954] bond2448: making interface veth8189 the new active one [ 3308.068320] bond2448: Enslaving veth8189 as an active interface with an up link [ 3308.090326] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3308.174866] bond2448: Enslaving veth8191 as a backup interface with an up link [ 3308.182379] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:18:38 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 12:18:38 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x25, "0ecc4c6f229eae32f0945ce4cc77671dc9177ef8c80ee17da7fa38f873ac088a", "a40d579a39e273c973c4bd1903cb035ad753c16f4ce1e070a5532b6f80f75d09", "2ddd5804d0135cd2e192ed5c414f39c5e1d6c0ea50fe25ddfc632f5e8cf986f4", "d1e5a69c817103f805d382e820d21c8ff87b9d93226c24f00c23f53dd45a747a", "ec43df477f3d82e82e171890415d31a4160590109c6ce0086386ab449cff91a7", "1e18c62fc4eb68a62d1f48a9"}}) 12:18:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000040)={'macvlan1\x00', @ifru_mtu=0x5}) 12:18:38 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x804}]) 12:18:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xc55b0300}, 0x0) 12:18:38 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0c0221"], 0xf) 12:18:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x14, 0x4) [ 3308.348828] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3308.356513] audit: type=1804 audit(1596370718.292:6626): pid=13968 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16164 res=1 12:18:38 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xd03}]) 12:18:38 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x3, 'vlan0\x00', {}, 0x1}) 12:18:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) 12:18:38 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000040)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) 12:18:38 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000280)={'bond0\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="01"]}) [ 3308.839242] bond2449: making interface veth8193 the new active one [ 3308.849833] bond2449: Enslaving veth8193 as an active interface with an up link [ 3308.869074] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3309.109568] bond2449: Enslaving veth8195 as a backup interface with an up link 12:18:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000080)) 12:18:39 executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0b070714"], 0x7) 12:18:39 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xf00}]) 12:18:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xc65b0300}, 0x0) 12:18:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x891e, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu}) 12:18:39 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) 12:18:39 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x52}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0xc8, 0x7}}}, 0x7) 12:18:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000040)) 12:18:39 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 12:18:39 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001340)={0x2, &(0x7f0000001300)=[{0x4d}, {0x6}]}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x7}, 0xe) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='veth0_virt_wifi\x00'}) 12:18:39 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x3f00}]) 12:18:39 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f0000001340)={0x0, 0x0}, 0x10) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000040)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) 12:18:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xc75b0300}, 0x0) 12:18:39 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'bond0\x00', @ifru_data=0x0}) 12:18:39 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040), 0x8) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) 12:18:39 executing program 1: syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x37, 0x406}}}, 0x7) 12:18:39 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x4000}]) 12:18:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x2, 'vlan0\x00', {0x2}}) 12:18:39 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) 12:18:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0xf}}) 12:18:39 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x0, 0x0, 0x0, "a73cd2"}]}}}, 0x13) 12:18:39 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e1500460c0000"], 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 12:18:39 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0xc0189436, 0x0) 12:18:39 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{}, {0xff, @none}}}, 0x18) 12:18:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xc85b0300}, 0x0) 12:18:40 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f0000000000)={0x1, &(0x7f0000001300)=[{}]}, 0x10) 12:18:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x7}, 0xe) 12:18:40 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x8008}]) 12:18:40 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x89a0, &(0x7f0000000000)) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x89a1, &(0x7f0000000000)={'macvlan1\x00', @ifru_mtu}) 12:18:40 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000000)=0x8) 12:18:40 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xe}, @l2cap_cid_le_signaling={{0xa}, [@l2cap_ecred_reconf_req={{0x19, 0x1, 0x6}, {0x5, 0x80, [0x1]}}]}}, 0x13) 12:18:40 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000080)={'bond0\x00', @ifru_addrs=@ax25={0x3, @default}}) 12:18:40 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000000)=""/91, 0x9}) 12:18:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) 12:18:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xe, &(0x7f0000000000)={0x0, 0x0}, 0x10) 12:18:40 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x8800}]) 12:18:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xc95b0300}, 0x0) 12:18:40 executing program 2: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x81, 0x0, 0x2016}}}, 0x7) 12:18:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$binfmt_elf32(r0, 0x0, 0x2fb) 12:18:40 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000040)={'bond0\x00', @ifru_names='sit0\x00'}) 12:18:40 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c00028006000100f3ffffffffff0400c4dee5dd315852943e9b8e0b181b2f0d98e5e575b47dd5b799629a3ba24817d6f2af09bc4bf288b9aa2c4621751cb2201252", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0xf000000}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_snmp6\x00') r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1c}, 0x20000000) r5 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000300)={r8, 0x97, "d1a7768ee3e0ba909f4e63418b05781fc1e154ac73b216c38c8f53bf94048542924547766485e6db2d2eaece295b2ad26e71ac0d96083aa136bbb8f053ce7e6445ae725e31d490129b79f77cd166c291e5bb22130672149f9d17c1ccd37399ae6b43450bc93c740965ce9a300b038fa6dec121893ab075c4630694ddd74418bd96d214529e90ef849e73b8c50763925a6f6e443e253ec5"}, &(0x7f00000003c0)=0x9f) 12:18:40 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xff01}]) [ 3310.827394] validate_nla: 5 callbacks suppressed [ 3310.827404] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:40 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x89a0, &(0x7f00000001c0)={0x2, 'vlan0\x00'}) [ 3310.888009] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3310.923761] sctp: [Deprecated]: syz-executor.4 (pid 14202) Use of struct sctp_assoc_value in delayed_ack socket option. 12:18:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_coalesce={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) 12:18:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000006"]}) [ 3310.923761] Use struct sctp_sack_info instead [ 3310.952628] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:40 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0408"], 0x2) 12:18:41 executing program 3: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0407"], 0x2) 12:18:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) [ 3311.029759] sctp: [Deprecated]: syz-executor.4 (pid 14202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3311.029759] Use struct sctp_sack_info instead [ 3311.090486] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3311.213300] bond2450: making interface veth8199 the new active one [ 3311.221671] bond2450: Enslaving veth8199 as an active interface with an up link [ 3311.233070] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xca5b0300}, 0x0) 12:18:41 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xff07}]) 12:18:41 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000240)={'veth1_to_bond\x00', @ifru_names}) 12:18:41 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000000)) 12:18:41 executing program 4: pipe(&(0x7f0000000000)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB="78c1ee5fa405aa70d165bf74d67676"], 0x44}, 0x1, 0xf000000}, 0x0) 12:18:41 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect(r0, &(0x7f00000001c0)=@hci={0x1f, 0x3}, 0x80) [ 3311.298185] bond2450: Enslaving veth8201 as a backup interface with an up link 12:18:41 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000040)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) 12:18:41 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_link_policy}}, 0x9) 12:18:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0e"]}) 12:18:41 executing program 4: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0xf000000}, 0x0) [ 3311.396673] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:41 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) 12:18:41 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xff0f}]) [ 3311.618880] bond2451: making interface veth8203 the new active one [ 3311.627592] bond2451: Enslaving veth8203 as an active interface with an up link [ 3311.638189] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xcb5b0300}, 0x0) 12:18:41 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "ee7884d1ba961caaa8f6ed3b6ccf22f08cd6da1092e5e882edd9e395fdc923b8", "d7d750318418852884918131ce739458493b86a7dd17d683475379390232d866", "ed06f48fa8a685528916078062a5b41247186d109b4eeefa7679d8fc1466bdcf", "14a45e7184d2f6061361e28816fb72800abe9eae7400cb84155d50448637dd44", "2a22edfb8fca8b878efa5b6e9eb23579d965f1918ac13932cd5f56e50805b071", "686f5a3f951c33df9d6364d8"}}) 12:18:41 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}}}, 0x7) 12:18:41 executing program 4: pipe(&(0x7f0000000000)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500e4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xf000000}, 0x0) 12:18:41 executing program 3: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0c00031000", @ANYRES64], 0x36) [ 3311.703087] bond2451: Enslaving veth8205 as a backup interface with an up link 12:18:41 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x20000}]) 12:18:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'veth0_to_batadv\x00'}) [ 3311.770755] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:41 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth1_to_hsr\x00'}) 12:18:41 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 12:18:41 executing program 1: syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4}, @l2cap_cid_le_signaling}, 0x9) 12:18:41 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x8}, 0xb) 12:18:41 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a1, &(0x7f0000000040)={'syz_tun\x00', @ifru_names='batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x3) bind$bt_hci(r1, &(0x7f0000000200), 0x6) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x3, 0x0, "2251f2", 0x3, 0x13}) 12:18:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xcc5b0300}, 0x0) 12:18:42 executing program 3: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}}}, 0x6) 12:18:42 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0423a100c80001009d"], 0x10) [ 3312.153517] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:42 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4}, @l2cap_cid_le_signaling}, 0x9) 12:18:42 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x30800}]) 12:18:42 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f0000001340)={0x0, 0x0}, 0x10) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) [ 3312.246333] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="020000000000", 0x6) 12:18:42 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}}}, 0x8) 12:18:42 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x6, 0x0, &(0x7f0000000100)) 12:18:42 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x89a0, &(0x7f0000000240)={'veth1_to_bond\x00', @ifru_names}) 12:18:42 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='syzkaller1\x00'}) 12:18:42 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000100)) [ 3312.690145] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400a0e1000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0xcd5b0300}, 0x0) 12:18:42 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x19, 0x0, &(0x7f0000000100)) 12:18:42 executing program 0: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x80000}]) 12:18:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000180)) 12:18:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "340a9a"}) [ 3312.938805] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:18:42 executing program 3: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="042f"], 0x2) 12:18:42 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x3, 'vlan0\x00'}) 12:18:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 3313.076006] ================================================================== [ 3313.083851] BUG: KASAN: slab-out-of-bounds in hci_extended_inquiry_result_evt.isra.0+0x1aa/0x5b0 [ 3313.092785] Read of size 6 at addr ffff8880149f4546 by task kworker/u5:4/7929 [ 3313.100060] [ 3313.101692] CPU: 0 PID: 7929 Comm: kworker/u5:4 Not tainted 4.19.136-syzkaller #0 [ 3313.109303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3313.118659] Workqueue: hci3 hci_rx_work [ 3313.122621] Call Trace: [ 3313.125208] dump_stack+0x1fc/0x2fe [ 3313.128838] print_address_description.cold+0x54/0x219 [ 3313.134116] kasan_report_error.cold+0x8a/0x1c7 [ 3313.138786] ? hci_extended_inquiry_result_evt.isra.0+0x1aa/0x5b0 [ 3313.145008] kasan_report+0x8f/0x96 [ 3313.148624] ? hci_extended_inquiry_result_evt.isra.0+0x1aa/0x5b0 [ 3313.154838] memcpy+0x20/0x50 [ 3313.157926] hci_extended_inquiry_result_evt.isra.0+0x1aa/0x5b0 [ 3313.163987] ? hci_key_refresh_complete_evt.isra.0+0x1020/0x1020 [ 3313.170149] hci_event_packet+0x2025/0x858f [ 3313.174459] ? mark_held_locks+0xf0/0xf0 [ 3313.178500] ? __lock_acquire+0x6de/0x3ff0 [ 3313.182717] ? hci_cmd_complete_evt+0xb5e0/0xb5e0 [ 3313.187539] ? __update_load_avg_se+0x5ec/0xa00 [ 3313.192190] ? debug_object_deactivate+0x1f9/0x2e0 [ 3313.197113] ? mark_held_locks+0xa6/0xf0 [ 3313.201158] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3313.206244] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3313.210811] hci_rx_work+0x46b/0xa90 [ 3313.214511] process_one_work+0x864/0x1570 [ 3313.218735] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 3313.223408] worker_thread+0x64c/0x1130 [ 3313.227371] ? process_one_work+0x1570/0x1570 [ 3313.231851] kthread+0x30b/0x410 [ 3313.235198] ? kthread_park+0x180/0x180 [ 3313.239155] ret_from_fork+0x24/0x30 [ 3313.242854] [ 3313.244461] Allocated by task 14480: [ 3313.248246] __kmalloc_node_track_caller+0x4c/0x70 [ 3313.253156] __alloc_skb+0xae/0x560 [ 3313.256818] vhci_write+0xbd/0x450 [ 3313.260341] __vfs_write+0x51b/0x770 [ 3313.264126] vfs_write+0x1f3/0x540 [ 3313.267642] ksys_write+0x12b/0x2a0 [ 3313.271262] do_syscall_64+0xf9/0x620 [ 3313.275042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3313.280205] [ 3313.281811] Freed by task 10907: [ 3313.285248] kfree+0xcc/0x210 [ 3313.288333] pipe_release+0x2e3/0x340 [ 3313.292125] __fput+0x2ce/0x890 [ 3313.295379] task_work_run+0x148/0x1c0 [ 3313.299259] exit_to_usermode_loop+0x251/0x2a0 [ 3313.303818] do_syscall_64+0x538/0x620 [ 3313.307948] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3313.313108] [ 3313.314713] The buggy address belongs to the object at ffff8880149f4340 [ 3313.314713] which belongs to the cache kmalloc-512 of size 512 [ 3313.327357] The buggy address is located 6 bytes to the right of [ 3313.327357] 512-byte region [ffff8880149f4340, ffff8880149f4540) [ 3313.339556] The buggy address belongs to the page: [ 3313.344463] page:ffffea0000527d00 count:1 mapcount:0 mapping:ffff88812c39c940 index:0x0 [ 3313.352582] flags: 0xfffe0000000100(slab) [ 3313.356711] raw: 00fffe0000000100 ffffea0001757808 ffffea0000a39048 ffff88812c39c940 [ 3313.364580] raw: 0000000000000000 ffff8880149f40c0 0000000100000006 0000000000000000 [ 3313.372442] page dumped because: kasan: bad access detected [ 3313.378138] [ 3313.379742] Memory state around the buggy address: [ 3313.384648] ffff8880149f4400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3313.391986] ffff8880149f4480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3313.399336] >ffff8880149f4500: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 3313.406668] ^ [ 3313.412098] ffff8880149f4580: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 3313.419434] ffff8880149f4600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3313.426766] ================================================================== [ 3313.434097] Disabling lock debugging due to kernel taint [ 3313.447655] Kernel panic - not syncing: panic_on_warn set ... [ 3313.447655] [ 3313.455033] CPU: 1 PID: 7929 Comm: kworker/u5:4 Tainted: G B 4.19.136-syzkaller #0 [ 3313.464023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3313.473377] Workqueue: hci3 hci_rx_work [ 3313.477338] Call Trace: [ 3313.479924] dump_stack+0x1fc/0x2fe [ 3313.483549] panic+0x26a/0x50e [ 3313.486739] ? __warn_printk+0xf3/0xf3 [ 3313.490627] ? preempt_schedule_common+0x45/0xc0 [ 3313.495380] ? ___preempt_schedule+0x16/0x18 [ 3313.499786] ? trace_hardirqs_on+0x55/0x210 [ 3313.504110] kasan_end_report+0x43/0x49 [ 3313.508085] kasan_report_error.cold+0xa7/0x1c7 [ 3313.512756] ? hci_extended_inquiry_result_evt.isra.0+0x1aa/0x5b0 [ 3313.518983] kasan_report+0x8f/0x96 [ 3313.522614] ? hci_extended_inquiry_result_evt.isra.0+0x1aa/0x5b0 [ 3313.528844] memcpy+0x20/0x50 [ 3313.531951] hci_extended_inquiry_result_evt.isra.0+0x1aa/0x5b0 [ 3313.538012] ? hci_key_refresh_complete_evt.isra.0+0x1020/0x1020 [ 3313.544167] hci_event_packet+0x2025/0x858f [ 3313.548496] ? mark_held_locks+0xf0/0xf0 [ 3313.552556] ? __lock_acquire+0x6de/0x3ff0 [ 3313.556789] ? hci_cmd_complete_evt+0xb5e0/0xb5e0 [ 3313.561628] ? __update_load_avg_se+0x5ec/0xa00 [ 3313.566294] ? debug_object_deactivate+0x1f9/0x2e0 [ 3313.571228] ? mark_held_locks+0xa6/0xf0 [ 3313.575284] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3313.580385] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3313.584970] hci_rx_work+0x46b/0xa90 [ 3313.588686] process_one_work+0x864/0x1570 [ 3313.592919] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 3313.597599] worker_thread+0x64c/0x1130 [ 3313.601580] ? process_one_work+0x1570/0x1570 [ 3313.606072] kthread+0x30b/0x410 [ 3313.609442] ? kthread_park+0x180/0x180 [ 3313.613423] ret_from_fork+0x24/0x30 [ 3313.618214] Kernel Offset: disabled [ 3313.621828] Rebooting in 86400 seconds..