x3b, 0x10, 0x9, 0x25dfdbff, "", [@nested={0xa5, 0x8a, 0x0, 0x1, [@generic="3cf1929672478e5beea68af32bd5b420c57d8c7abdcb50223605cd4a8eaa316c82d6f3c2ef6d53874514bc3f35e55e166855a249259549d0183f38994b09493f969ddf1f48e5a0b500e8f6d881ae0c305d6c0ff4424330b8b4e6d2090dbe7e02f768e695c6d6c6ad34381dccd9ab74bb122cf7be20d7e82cfae62cae5e14703ae7ac25fd77d3beb3731bef351760487ae6707d912547316be8cf730d3b7c7a4903"]}, @generic="45b85201501a301c76df0e38edff3d1d06725b89836551a4c29b44ff46417547b1eab08e3f4c6561462d7b3feeea53456139ce9aba6ad0d8081a0339be6e0ea1ccaa13391510f882e2bc34fcdf7acfdbd85c30eb71e31bc02c8d4613"]}, 0x114}, {&(0x7f0000001600)={0x10, 0x21, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x10}, {&(0x7f0000001740)={0x44c, 0x39, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@nested={0xc, 0x3f, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @fd}]}, @nested={0x42e, 0x58, 0x0, 0x1, [@typed={0x8, 0x6b, 0x0, 0x0, @uid}, @generic="4a010de953858f3a3d9b5a082cbb50fcbb7ffbd9fc6255812a81a3427c418bd694aedf9c935fac1e49ae414a93ef8c1a3cf8a61eaf8e61cea755b713d4ce7f8c752dbcc83f553b1c85fd3662b8d6b3876a74f753c6c764f0b7f488534a1ba14112f8638dcb4ae09e205adcc0ae4dc4d32b30412b0f198864de264cf80c69d5ab9b4246efbadfbc1767397dc8d0ecec9161d64705fac383a40f489023f4115c2471c6783cda36e807b601c2ca0cfb8a9cb2f7e3298db083b5c37953b6e0d5d59cd3e3196bd8eec01f0cb0ded8d1cb", @generic="771e37e44ac732ce29564aa892cdf54c8997503d29a7743b6ef684d22cf915aed605b7b59e78f11639c7eca1b60e045443702984499e8852a6d47853b2c1350de09eed089b6a2ff03e8350e1ae6a5c2c18eb0bce3ea58639de68764b89ff0ad98b17c532593572cc7de75e166d9b01d54f249eddd06549faa23ce4c132e3f0c65ddae1c6b728fad0f9182697d036fc0151e575e5eb0e955c9fc4fc6186971b8b1607d65309ab3ce4d8acde11c87ee1490b3f7a190f56a66a5182d57b72bb796d37864636fb5504c852ea0b071c514ed88f5187f3e416c90548172bdd5fe2352d8bcab1fb48458ad36014fbe01df30d7e6e", @typed={0x8, 0x9, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="1923d68c61d9472bc244edbd54043b22c8f80be91309bb4dc1d705eb603d2cb0e220c3dcdfe84376b34659d9e9cdf31edf8fcc84975b9fc5b18bfcd4ca1d5391adfd02fd62b22d766cad0fa6e0b0f2ea4822da2d76f0db56e7f157dd77f06606c42fcb53399d7fc6d1d0e82925fcdf6888bcaa761c5c8a48a71c52f3df3a5ba49cac002df1d4462e6655f266952a0244e1e7ccf17bfd2ae1d73a6c391700e2413ded5d2cca6ab39a35ff28f5ea25223fce9de3bbd9f029ef087addfdfc226456a4faff31a72affc69b7118", @generic="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", @generic="8987eac68e820bc57dc36ce8d31a254b7318b7a60ea745c8035eed326d8289fee7df9a2c0c", @generic="9fa718cb3d918e318cc786392b7d3ab34a4f38d6b008b094296475ddc45f5587df6131208f239cc6200a538dc7b331d226050fed451d10068f165a4a08793c42dec934b21b011fe9559f7b3be4fea31bd9a7968a3dfd7bab97e64bf40191dd37b88970befeb8740f48338043"]}]}, 0x44c}, {&(0x7f0000001bc0)={0x24, 0x30, 0x200, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0x6f, 0x0, 0x0, @u32=0x800}, @typed={0x9, 0x59, 0x0, 0x0, @str='{}::\x00'}]}, 0x24}, {&(0x7f0000004a00)={0x14c4, 0x31, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@generic="57e0bb15954636231161a312fadda4d28ab5dc9ad4b0711a6f290213d65f07323f0a33a338891d03709704324fc4c7eb450b6497bfce9c6bc89c03f160d15dcf6f826029546c432e274c34f9145f558e28951d07c326f0f8f83c332043c67e82c5c6165daacb802afcd3cd7be27f5785300c87db210f381ec52f19623cc5688e45bfb9fb7f399cad45061c6555b423a8077324035274ea6411c6a84ebdbc2c15fe6be2ecacfd9af23eabf7180b3b8ce9b004aeb87608e0adcf4068ead9b0c9c5176c6de7733edc3f76dc76e74f2b007c3c8c830920d106a94595a018b912a1558d4cd0c5ac4dc762dbb6479b8e3281da1ff431c72bfd3d7f500aa6a50bb8b8f9a210bb6f2a6c0e4b78dbf885dad359a3b7559a489ca4d77cc8b7fa57c6a83303b498c36c5b237a429f52ce1b8eb952537639149aac31aa9ac416af84a97d8f04e27cc346c8a5c208debd0fd575997ec66e288c5eb85b2bb0f3ffeb6d003ae8dd79ee239f1289a3b465e0104d468f3a97396bd4bea372cede182e405004e067371f5c18bc428dafe036916daaf16e5130157fea37363283ebe51cb62416e9dd871ee5378359da544c963155ccea84dc36698b33961d7f23a0022bf1152911caa344fa0d28f4b8e7aae1815c6a09c205684052516b8a8e1884d501197462fbc3e6c8318e15e7588a8f1a0394588cc95bd5d5d0198b7158a376530f9953f452c60ad94b24a4232eeec3fb17db1ec26212af93c772292432e7cd6f24a74f91a2e445bf10aff39bd43e6597387ae89b27548c5ff85afe738a2052ba03e6652052c020cd3023f9579c1c22f5fcad2e0ae4db25951451fbeeca5c9e9d76af61108290d5a62a3d21a4ef7f3d119612e64aa40c72925689f84f84a313de67f4e6ac4ec27aa26c0f0d48c0753e751d619014cccbac4283f4d78adff9777c3a82cd7c4e3dc0b275a93fa47961ab381a15cb836b78061d3bedfbaa4ad34c88c95299936806a1fd80e9dd619daa1f73d0a6d4958196faafccd52e382dd7acd9fae3982f72514b28fa4ed0a5263c5d8af1666e2886a3ca59ec35e18ad2bc9b55c2525114b8de5941b8bdc5890c4be1214b28a48e813c760f88039bad04dbbd046301b4ce8c27291c00aee56701715ea9e60cf77a911f21d2431ad0c4a17e84fa375033fa3d7ce2d82fbd064c3becfb09029f7597a22cdf14fff84ff6951c6d2d9ba2b9e6c3dd7e3651837b67fd16d57a96fb8a356a26472b4173dac67c6c48f40ceed88f7ea7c10b56c2e41cc9c64266ac8282a0ffa138b3b606bc3ff25b3a5525a10a0ea4d0ae2806c9bc7d4de7d7358c10f867fa15ace93fd4619bd02a54aa248715056b49f2f441daff844dff382d98179829cd00400dd23f8d50307cc24eb320abb5fcb8b557c78818bce70d0e3d46a5d40681a267ca133184032912227a41167d58050ec1b091708ebbde1e52cdab8f3cd6f1ef48e4744edb44acac4d0d136151b5582580711cb0f85494aebd3e60cd0b77d4f4687c6d6c39748085475fc35a6ff23d77e752605802294e3198888f90dcfc551352b3f2bb2f5eefb13f0ba25594c75eac062b39a41b7de459178508ba651bf8727045a87aa8ae4fca85f921e68d2d19b0e658db340eaf05e103806ff489ffe40a06b96555366e3c1c81464c12a3d4601f6f69d6af5e595b1550360353abeee9c966c27901b886d9ec854ee5ed217bf7d0bcd6276178511a0d3cebbc0ad2ba11dedb487d392a842761dd9f217fc3e7eb47a2ad1ddf874dc56ef2dfaf44357781a8fa394b9f12f7b55e8a48c0142123444255dd7352d5fd64d44a3c8f0c99e8d10b2bfc9d8c1ad88e2aa61c1f4522a5dd93edc8ce52b079eecc1f1db3e7f6d24c53d44c474be8262c4188b821f9fd7ec91f1d62ca3d115fb1de0f38c63282f59508d1d48742e2d4e5ea865bdae0a595dbae540a71b8443baad0d28b3346e31504d4bc8e2ed5511f59a15d7b87bd89f143228e71f48ee2a91fad746b0618601e4c3b822a72acf8b02d89dc3bd1a2efc77cc6e336776ba1715a382583e6c1a946013f336e6125a5f475c942ecd9bc396fcc6800b746f469b59caf661b4a6f228ba13ffbfd4a0127f5bd630248d995995061d2e9320b6255f44b6ac78a22a31fc38924fb58b4d91e7aa900c41781b952d9482fd10103071d5fde8d931658b87c1c38f12b95b1d5eea528b87e6ec4a5120532c4006cd79d1168d7c6573f33b86ef0a51ea1bf085ba2e0f5b11bd33e5f9cf28b02aa9cd45f07d0333a7fcf5ef6007e2031e930934e413a72d358514e438b870456b8634516fdc1f238b732ea16b797852493c9594cfdf1e7f8dee6ec85fc3b3b8446d83f272ae6ce17e0bd4892355de6ab9efcdd2d03622e670d37c6750a9e96348ee38375d547e2c6126bcbad9f45dace7ad6f2a7ca90229a43c8d87a8907f3076b6d127ca38a4d8d4e4ba73ed832e13dada831efa2b88022a98702d79c3c3c8897d73158b02dd6c1e4713d63957d5b688c4f8741d19210ccb1139cc5787fe2f88dd10713337a8ffa36c76a2ca83ca3aef24b03bb8ef74b64db7804793374ecf4c852f62a2609b364a33b79965f23e40e0d7da6012139c9b56578bff79f593748cbbe9e8fa9674fe790ca1873d71d9b853bf53ce756bc2ebe823fe37f1a44c0760e5d83694ca50ebd10e85ee82c5c93305355f05fef8ceb9954d7780dbc942a72ed611b0ac5ecbe071591cde358488e0fd18d24284d562757cf01b64610ff7c030e683aee8db4403e9fd36a486ba0a6670916256649bb316921ec4c71437bf32fd9eb8e36e27561f526770fbb908ddcaf969a42649cfd2caa08d50830301c5470aea2361399c266f48eaf9f62f5e977beb20a832a09deb6b2fcb5142d2a11443e9f04bb28b32cca364f97d5460b7abf1667eef7ad07a844d1e61084a49b74a4a36639406c702ba6b18025e82605d5b3e8f112531e1fe46cb6ad7dd112e7c1f6ce4018e0fcf56ca49140881cdeba297d33a18098bd0a526813fe11846a4d1f4d6d873efd59473549c2d5dbf8609c5236eb0bc032710f755e8d2cd58d70ee5e20939d2af301c8c65343d9878fe6fd62b2cc31f5bdbdebba9dd9da54f16ad5e34a39aca6ec2bf88190a7262df8b6c431306633a2b77b29ff889990ee16f5d06ff75fcb4e2c23273cf3e99b0c030308c8a087f832388b28c96d3fdb12fd0bf7cb122288d6c16c4a6b140c6851683d8d16c7f26c8bcf3a76c829732c5424aa018b1e05a2357f5972eba4c91dc862b47205dfbf1491ab85b9d5c70eff27125e4efe822b84796b9b385536931c8d4f5cd67db1524b9828e225f04d4f3982fc8563415d4bbf236b044bf6a55027eae06690422a831dc75ab18e063955a5dd4e945e9d210a04a993cc38994d9edb693e2ca7f0ce40b88afa8c509399253bd9552bd48846fe3e02eb597ac2d902c9a56bed94d36c2e11432c143a917cb9bc987e2f4035aa7e8bd08567253aa12ea3f2c7c8887169862fe98e43e8274013e70aad12fb85a83fc4b70b042037bc9881eed74351649f4bb5bbae1bb012d547c01319bf98323b8de9133dfd78e6d083d1a9f5555486dbe4b0acfe0fc272c2e30e1f97793c0a19d65ba6795ceeb706c946969d8f4ba8f3271bc89bc914a454c6b56939a6306634b8aaa3c88efb1acbed860ee3a3ec2bae18c5c7de089864003e6825be7f782bed5ff482acc1a58be5dbfed8e5f26fdb001055434d74e202a8a2053c180b77d481c987d8f00dde583c88ed7a23590f1eb388f9fc569b757d6b33af5f0edaa04b943579f8f76bb7f7451a4a24005b018770381191210b3de778867f9ab753ae8aa1ac47f13f2181de23bd41d8763858be684bfe248e8fba8d4ea040275d15e8d5dff0c52d42d57831ea15eedf6a49653271b400f6281a797ec5e96d0e5ec6a172f73c75a8bc76e20356aece50fa17224bfe6d83a6d028b715bfabd7c314cb389fbf888b9cd7f7915319e81107d65caa6d714d781321a25c775096b85d8b6efe4307be7648ebc305078df0d2b96d416fd0ed2cebe22ff057685aa7ff831adb6fff4e36ee87332873ac71688fd0634b95401e5aeac4bc2289cffe12302283e67e8de0a246d59cbf6087cbc56a68f18a105693965a335ea9e3a5663bb000d972589149370264978ff0ab1088c1febce458519ee0cda2db1c5b04467e9c47a9649c5ed2305b7c966c01e337a07160004895d90ebf74a1a3cd28ba34c89a8f6dd5d57ac96df592f0c629072c290a7f530406b716977bc0b99368125725ee440b3ed2ac31afb6eb50a3dd53818e8ed9fcf3990da00980a2bcf7085fbc12464d7f3b4dcdc98a3d080df5625944639e9f8b9c3da226ef7119dfbf1ed16601f3be1ad2e252ac3504831842da190fd18590a0ddd29e8ebc7a24649bd5da4f4d04ec780574aa5ed64028e0a7d628eb2c50f5d86e614ae3fee2ed96f69b36907f87274aa056af167a006421abd9909945a8cdb2cf8e71b5fc6ae29fb163b44d812fa40f21f0450f3e3922c159c4af92ec4a94a3c59e07a90ffee16c30f4f1ea78ae807d341045b19262796481a841e045578139193f9d6f2874a8f0786fa9853ddd896b771d16a2959764af812665432142bee97cf48903c2694b2d6544943adb891859f4509aec8f8f732b718aad2ca14aef9f0cc643e44241d8f68e8a56da0028462daa7d3bbae7fbbfc43ed62b1cfdeabd86d8f9b518c8aecc98c782b1fa848afbb474721c93eb1cb4ee58f108e654e05d087f045307ac2c2d9e91c19f027de0e4564150cadb0464369a469f2c891d9eff049b517317e17d105098bc95d4c2ef65c1110d21d36e9bbae4274ab51ea1865e83f40dc7fc8f8d22067d222a2751a2343cb01295302b4556a5a4b8f0a5203a9ce67ef2dd72fa21681319c21e569270646f12c4ec3d98963209dfdc65597a4911cb12752ea09b571f9cee50a7531068da68b7a61f3fb5fe116851003a6fefa6ce147cceb0acfdc9f60d93278da0f3221b30420d3ec1062601db1e10541dfcd945fdb246ef7ab9326b908676d12cc9e9f3533b6a997340bed745f871c2f64b60288ec2838bfa2e899e8decf80af3b68d58935c52c2220d5a9e93c1ceaedb0404de00ba2b88b30eabd547576a482ed598eb9bda2b3503be987cd07be5422d9157dcd7f04ff0d45ba6212ea3a65b3ed06b1e3a51681bfd55ea8b05b3f201f972617b01feb4331044877a7a02f9b0b6115fa0306547bafc0112a564e19732fcade143110e4fa052aa4fa9f27b7f073ea90cb3a25b2850b4b223010fe942ad4ba78749d2d15da8ea20852d29a4166ce4e1a193b222c28ca8a0ff78cb767eeaecfbdd1aaaf7295b1caa989dc2cb064dbb9f94b5ef04c1ddefe6208b50d142b97aeb88c5e1cf49b74dc0e79331cf0ffbcccb7c57790df8f782dd3396ec38c85616834b230c92d8dac1e8e9af50b4a2f600d3d5cba0abd9262192933920b4513b2c367476d587e556858c598803d7550989641d5ed3515417184382d647d20597ea78c437f7621d107744968e0b5bd2bf4256d78487552b0ad8cf1b6a5f05cec259298df1f6330681e3ab2182538865ec85846e16ef731a471f2cf876d36b0bdf05966f682034b94e66292eb137258099b0dc91388461d92aa4b6e1eaef91a70925dda8104ef3cf403232c2749acc7f17703a0c485ae0f3311685da6a557359340d6b3f2588bfe9be1b36c206f6eea0a63b8f3019cabc8d5a8761003d427abcab6df53b7b33e2e234d8114f33a512f0994bea4ff8d8a5bb8750e3f2", @generic="34697516dc4869ef3c9892d9fdcfa2fc7bb0cbeef1cda2adeb9f2f9a9ee74163c111303ad044da76a043077dda8051da42c357d015e34425181a8ce3aa6acc0efdfba7e523e293d3ded3a850bdbc562d7a99d240b6eb", @nested={0x1fa, 0x5b, 0x0, 0x1, [@generic="c0f9510050ef11e6a6a2e9486e5c8623eb88a0cc4741f22f4e52a5b9e3c5a75cac8e35a6142b730663a91a101940cfd14aae125dbda33160d46c187362fb9150351cdb877d1ec80ba37e66470be02539626da956570fc279e781204d49f6298f3e4ab443223740f189626ed01bfcce56cb0240ce3eb43ab49d820b424c6abc0cfea6ff2d1c67ae2b07b96828d452ad", @generic="108d95ede5d990fbe262b60ecd951cbdc8288ccd7889d2b60d470f1404759e00546c4e230f466d0c708bd079e6c02edb26e88d209c531dd242281a5cdf04d60af2b8c282fb557aa9ddd65c3297e6fc135e1de7c03b40d23322ca364da6a7d6111c95897a194b16aa8e6a2b7ce4389251c8460327cc17449808ab040fcfc2275ebb1d069eabb07b5c92ee094c4c6d4476d9720f00bcddb8143475029b1267433fc004b60ff73e83ba23270810c2ac04e19b4b2514b9b4acf779aa4c3cbc7939e56d8f29741e9ce16e1e12213202b7cc9b8e5da8933cf9ee5e", @typed={0x8, 0x49, 0x0, 0x0, @ipv4=@multicast1}, @generic="c025321512d8a14a12d4d59fb379d57a6d605ce101a38db15bffdca904028c41bd54de2b7da1b437155c58470e6682f2166837f179b7", @generic="8d7853fcf8e8a581615633316e15d4c0782d28a6b6d62ca4451fe010efdf134b6827d079e45657a402440096e6c1fa8460cca8d8fd8bf7d0a59d64c9a970ad2b9cfe31764c1b8e02bd67642b82406690ef"]}, @nested={0x11f, 0x7d, 0x0, 0x1, [@typed={0x4, 0x80}, @generic="36d9b20ca1ecf69074d03d255dbc771bec62a84ca62cb0edda308aebf65a33b2ce391f840e1bcb241264a0a39ba9d466d82b417a371360d22d5d64cc7d738be5be7e3b5ac53ecbb78d6ea756ee406c68d69f9ac38b4c93173a6ddafb27451e6c62b60c32244d29f84f00f40460c0ebff07b5053673209149dc68f2ad171e7e142e79c8e74c8369d34d9e7a178deb4b0b8f251ed12e9087d03c0d92c62fc36be233", @generic="dd5f66b9c17e30adfe34aee31274b3e2c629c119780e012cdfb6ef0d30b31752d8334d7f2bf6b0ca4b6ef64e907145a538d4e0edadde72338086719839f81588032c5a629d16c1dd022cd7adb4b4ff05f690fbc703c83babc6f62281d5d683fe802e8a877d2117636d3b", @typed={0xc, 0x7b, 0x0, 0x0, @u64=0xa0}]}, @generic="7a2328d631c10776c93c49526b9bb8aa36508f48d936ed721a6afff858bfcf1b0bd73c2c27f4db2ea8ec5c29ecd622d1b9c1d9bb149a6419df78d75b787b9f80091ad580413f6705222271ae4ab5df", @typed={0x3a, 0x2d, 0x0, 0x0, @binary="251b6ebae26a9a3c9519256ce7fc8b0e3ea29864c9bba27bf47fa031e42879a8b4236118bf8de72f03dc8849aff611f67b5e497278c4"}, @nested={0xa7, 0x73, 0x0, 0x1, [@generic="2e79d5f003cf6c674a0c0c5c1b5564750ad30a212d6c00a50baae8b9540cbbc6f756e5d0ebea1f97c326b24b1280ebd2dcc4f44af24b18009726e2dda5bbccbda00c22a94c9aa50a6eeafca7fde3d6852e8ac221ad492e35397e3060ad0511419a728a0b31cd911e463102de14363b6951388b8c02b4016e06b8fad1d7f6d7ebf88b3b2663d4d0352801146254a01e33e04336d35dea5a7c64829e68cad8ccb2458aff"]}, @generic="41202302a5", @typed={0x8, 0x92, 0x0, 0x0, @ipv4=@local}]}, 0x14c4}, {&(0x7f0000000300)={0x94, 0x35, 0x0, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x7, 0x9, 0x0, 0x0, @str='^\'\x00'}, @generic="9dded8b08ecd6373ad87916ec0a1bce527d3f8f303709f8675bd1e8787eee67f966c24ac1907ae20d1f24bb1102d6750c4bcfc682ef0645b07566789bf0fff4883f8445a08bd5a17e7620549b25eaf92e47735fe819569fb95", @nested={0x4, 0xff}, @typed={0x8, 0xa, 0x0, 0x0, @uid}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@ipv4={[], [], @local}}]}, 0x94}], 0x7, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1, r2}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x10}}], 0x50, 0x80}, 0x10) r11 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r11, 0x29, 0xc8, 0x0, 0x0) 00:09:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:34 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x1f) setresuid(0x0, 0xee01, 0x0) getgroups(0x2, &(0x7f0000000100)=[0xffffffffffffffff, 0xee00]) setregid(0x0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xd4, r3, 0x300, 0x70bd28, 0x9, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xa5002db7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004884}, 0xc005) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) [ 308.033884][T11830] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x206, 0x81, 0x4, 0x3, 0xff, @broadcast}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xc8, 0x0, 0x0) 00:09:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:09:34 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6b, 0x53, 0x5f, 0x20, 0x4e6, 0x1, 0x200, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe6, 0x4, 0x1a}}]}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = dup2(r2, r1) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000080)=0x6e) [ 308.307112][T11849] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 308.398877][T11858] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:35 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202eda930809c0ea9e83b07f671b6f1f14ca9aae3ca10c18f4556989833c8e724bafc901000000000000008203e6f934f7e71e80c199fe661edcaf283d07cb2d7fc8c3a09a4975d19c188862eaae36010000006b69a23633fdf367530b16d4d7ed36f00b9ed551502636d57c96337a850a86664e2bbbbe62e5ff96dcaacae748e10068a2cd"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:09:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) 00:09:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = getgid() r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000004c0)='./file0\x00', r3, r4) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000004c0)='./file0\x00', r6, r7) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000004c0)='./file0\x00', r9, r10) getgroups(0x4, &(0x7f0000000000)=[r1, r4, r7, r10]) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:09:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 308.588223][ T8921] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 308.601819][T11871] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:35 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202eda93ca766c3610bff22dd2343e3cff0f0010000000009e4b10ae2dd039273e8c6223b8599f547ebb1153ca93e70200000000000000030e7941d5d03e060805ada8c1f14fc958e1e959a15e53c605310dbb9033e0eb30e2e07557ad800852fad002de704598a90bbeafe77f26f37871ff9bcf8c739f7fd17ebff01d05883bd585423565cc2dd90a088a0cf0b4a53df7b60fde759992dafe92875b11feb7bce73985d939917fac49adaa081b644d0aafa2fa86e479ecf5eb5568e7e4023d5ae515d3133cb5d2bc46f02a1bf7d6992e332bd6fb3ad6957b2f5f82ce02"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) io_uring_setup(0x486, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x74}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x15, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {r4, r5+10000000}}, &(0x7f0000000300)) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) fcntl$getown(r7, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:09:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 308.861525][ T8921] usb 6-1: Using ep0 maxpacket: 32 00:09:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000000)) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) close(r4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:09:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) [ 308.991665][ T8921] usb 6-1: New USB device found, idVendor=04e6, idProduct=0001, bcdDevice= 2.00 [ 309.000741][ T8921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:09:35 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x78) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 309.074664][ T8921] usb 6-1: config 0 descriptor?? 00:09:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 309.122191][ T8921] usb-storage 6-1:0.0: USB Mass Storage device detected 00:09:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) socket$bt_rfcomm(0x1f, 0x1, 0x3) [ 309.329188][ T9107] usb 6-1: USB disconnect, device number 8 [ 310.117051][ T9107] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 310.361142][ T9107] usb 6-1: Using ep0 maxpacket: 32 [ 310.487216][ T9107] usb 6-1: New USB device found, idVendor=04e6, idProduct=0001, bcdDevice= 2.00 [ 310.496615][ T9107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.530876][ T9107] usb 6-1: config 0 descriptor?? [ 310.588506][ T9107] usb-storage 6-1:0.0: USB Mass Storage device detected [ 310.796817][ T17] usb 6-1: USB disconnect, device number 9 00:09:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:09:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:37 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2303202eda930809f3ea9e"], 0x194) close(r1) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000002c0)={0x2, @sliced={0x80, [0x27d, 0x8, 0x1000, 0x2, 0x3, 0x858, 0x7, 0x20, 0x8c08, 0x0, 0x0, 0x5819, 0x1, 0x4, 0x1, 0x2, 0x6, 0x7, 0x184e, 0x7, 0x2, 0x6, 0xb3bb, 0x4, 0x9, 0xff, 0x101, 0x401, 0x6, 0x6, 0x9, 0x64c5, 0x60fc, 0x566, 0x92d, 0x0, 0x1f, 0x3, 0xf90c, 0x4, 0xb90, 0xf800, 0x1, 0x2c0, 0x86c5, 0x0, 0x4, 0x7], 0x5}}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:09:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x2) r4 = socket$inet6(0xa, 0x6, 0x0) close(r4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@host}) dup(0xffffffffffffffff) 00:09:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:09:37 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x8040, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000002c0)=""/197) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000140)=0x1) fcntl$getown(0xffffffffffffffff, 0x9) setsockopt(r1, 0x400, 0x4110, &(0x7f0000000000)="b31a009bdb12344a089d788eca1d8d9074f8aa9d3cf2d9454599d37936865e2484cae73c8d13b5fdf1608a7ab33882c646a6f9b983b0bb2dcf7e58e1f089f4942fd49ce4ea4650b7894267c4ef2f7447251ce5b0c0c7df85cacdf3c75718c9234a9c34a210f20a061e8e537d77039a45d5ce9302a93523a628cfb141bfbdd7f99c64699071c21bd40485de0253175818297df2f28128b1268bd783d1fcc80e8de5d4802bbaa87b3d8d22bd663a6954a12a4703e9e33a08457678f9b39fe7", 0xbe) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:09:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800003, 0x1, @perf_bp={0x0}, 0x200, 0x80000000, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000100)=0x1, 0x4) r4 = socket$inet6(0xa, 0x1, 0x3) close(r4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000180)="bd7aa2d50192c5d6f140851aeb64bd4927e18237a6e2722537288df69fe0ef1a049987c8b20d8f0cf7a5ee04c6fbe1e1b1b0f390bb2e22e26f51a0f2e25a8d4acc907e5602f7b503a05e1324c7ec2f819a305cd19a18dbbec833d8c2c9a448331ea6a390411a0e353b30b631a16b7ff718c4e00a8ab85d9ffbad3c22a1b45ab856b5f8fe06e3d676e056220829d5bb5a2748264c58017c6dcafd16e6af81fe5fc461c7bd4dfbbcde9e51f1ac0f0f35b4", 0xb0, 0x8, &(0x7f0000000040)={r5, r6+10000000}) close(r1) 00:09:37 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x8) 00:09:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:09:37 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202eda930809c0ea9e83b07f671b6f1f14ca9aae3ca10c18f4556989833c8e724bafc901000000000000008203e6f934f7e71e80c199fe661edcaf283d07cb2d7fc8c3a09a4975d19c188862eaae36010000006b69a23633fdf367530b16d4d7ed36f00b9ed551502636d57c96337a850a86664e2bbbbe62e5ff96dcaacae748e10068a2cd"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:09:38 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x8000000000001, 0x0) 00:09:38 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202eda930809c0ea9e83b07f671b6f1f14ca9aae3ca10c18f4556989833c8e724bafc901000000000000008203e6f934f7e71e80c199fe661edcaf283d07cb2d7fc8c3a09a4975d19c188862eaae36010000006b69a23633fdf367530b16d4d7ed36f00b9ed551502636d57c96337a850a86664e2bbbbe62e5ff96dcaacae748e10068a2cd"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:09:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r7}, 0x3c) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={@mcast2, 0x25, r7}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e74, 0x8108, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x2510, 0x0, 0x1000, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000), 0x4) r8 = socket$inet6(0xa, 0x6, 0x0) close(r8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x1, 0x2) 00:09:38 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getresuid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fstat(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x6004, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_gt={'euid>', r2}}, {@pcr={'pcr', 0x3d, 0x21}}, {@fsname={'fsname', 0x3d, '-{!(*@}'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot', 0x3d, '-'}}, {@dont_measure='dont_measure'}, {@uid_gt={'uid>', r4}}]}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:09:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:09:38 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321000000000809c00d9ec4653530082d271b8d165c642243af1b82693fc61496eb30ec6bd3c8cad5b8c22d3e5867ffc3c3173452da97aa56fe658aac96333df20f704ae21916e287b021fa3911c2a96fb8c64504e325f960e64bbf99d086f98515dac1cd727f92523f49b3344511effbbd71c1370b33b9ecaeeb5b7bd57e0f0f95e57f82f4fd0db5ca3a38090074005fd4285acc63ef2cffdaf228c18e2909eae3091c6ffbc06aeca7343cac437670c049f62b34a236ae"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00') 00:09:38 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202eda930809c0ea9e83b07f671b6f1f14ca9aae3ca10c18f4556989833c8e724bafc901000000000000008203e6f934f7e71e80c199fe661edcaf283d07cb2d7fc8c3a09a4975d19c188862eaae36010000006b69a23633fdf367530b16d4d7ed36f00b9ed551502636d57c96337a850a86664e2bbbbe62e5ff96dcaacae748e10068a2cd"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 311.790763][T12064] validate_nla: 10 callbacks suppressed [ 311.790772][T12064] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 311.902185][T12073] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) dup(r3) 00:09:38 executing program 1: r0 = gettid() openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:09:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000240)=""/178) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$caif_stream(0x25, 0x1, 0x2) close(r4) bind$packet(0xffffffffffffffff, &(0x7f0000000000), 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r5}, 0x3c) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', r5}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x10000, 0x0) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f0000000340)=ANY=[@ANYBLOB="030000000900000001000000005403f41f5c171c2cded22cf74faf8708ec603185503736d3d85500080000e1000000000000000000000000ffff5767009c000000af0200"]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000180)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/1814], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x1000000, 0xe, 0x0, &(0x7f0000000140)="e3d0e9d6d9d18e5f39868de363d3", 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) fstat(0xffffffffffffffff, 0x0) 00:09:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:09:38 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) ptrace$setopts(0x4206, r2, 0x0, 0x0) 00:09:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) [ 312.207886][T12096] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x94}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r6, 0x40}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7d, &(0x7f0000000000)={r4}, 0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r4, 0x80000000}, 0x8) r7 = socket$inet6(0xa, 0x6, 0x0) close(r7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:09:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:39 executing program 5: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) syz_genetlink_get_family_id$ipvs(0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="d0012000", @ANYRES16, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x4000}, 0x40895) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) socket(0x10, 0x803, 0x0) clock_getres(0x1, &(0x7f0000000240)) openat$md(0xffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) [ 312.354511][T12109] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xe, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:09:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) [ 312.666120][T12127] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000002a00)={{0x0, 0x0, 0x80, {0x0, 0xffffffffffffffff}}, "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", "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"}) dup2(r6, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_NMI(r8, 0xae9a) 00:09:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) [ 312.806525][T12139] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:09:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) [ 313.054415][T12155] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) [ 313.177091][T12162] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:39 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r4, 0x20, 0x70bd2b, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x64, r4, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f98}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:09:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x58100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x112}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) close(r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x2}) 00:09:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:09:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @window={0x3, 0xfff}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:40 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x98, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x40}, @CTA_TUPLE_ORIG={0x7c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8010}, 0x20014010) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 313.438609][T12181] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @window={0x3, 0xfff}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) [ 313.536161][T12191] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:40 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0xfffffffffffffd44}, @IFLA_XDP_FLAGS={0x8}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014000e"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) 00:09:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x20800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0xa, 0x6) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:09:40 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7f, 0x40) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) fcntl$getown(r5, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:09:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1e, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:09:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @window={0x3, 0xfff}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @timestamp, @window={0x3, 0xfff}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_deladdr={0x20, 0x15, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x44}}]}, 0x20}}, 0xc844) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x12000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2b04f2ffffff0080000001000000000000000141000000100017"], 0x2c}}, 0x0) syz_mount_image$ceph(&(0x7f00000002c0)='ceph\x00', &(0x7f0000000300)='./file0\x00', 0x6, 0x1, &(0x7f0000001340)=[{&(0x7f0000000340)="76bfa14ef235b8743ee847180b216c9ef2a5c79c4fc7199c350788142445ea1e4a587c806beecba876dced65bfe6650725472c1925d0ab14b64a4a399fa774f6c0b9c17657ce134552c24f091e9399fba1b11190270312077e69fb2d6daead9635c46dc77b58e741a57a3033d5fffaf9c34a0958db76d527e65bc12ea69c320ff51c84f9bd48a87f95b74beb690046db6c3e80e3ea7feb9a08389e6bf48152f2fc6958eddbbcacb939a8200c8a0aff10a7ca48717b8aa8771fa02d41fa1ae5bff968579ce8d9a9c15d1e1b7448597adc46df78c7b20e50d639d7244b1b39c41ba53bab191bdf2fbf28cac04f5f3ec2bf8511f77d0a802618920c0566842191d4bd6a0a20118cabb4a771cfdd309737422037995150b18136c9844255387f004103f801ed12cdb697390042c734533a72905cf9155640ea19c8a003beeadaf4693221e49abdc72450eb56a560d4ada71cd62681a14dd1c3a7d6e338761b04efd9c87c19c9b5a050201fc7f2f3d165eb6158d09156394113358f5335b8a13be09b5d5871bda17c96926a478696794496eca983e0fa71fe36bf2d4d337f82c5844f1bd45e29d3a23e3a2a415932b665a68a633b16a42591a99056d4eef1a97c2b5a640ec967fa7b7fc58e1dfa906a8fee24d22f8db55654b45d25e408b0f051d5d4a8d99cfe0fbe6862d6d919753a93968b6a09a0d7e0440a4ce2e72ffe374ba047cede3564f57a92f0e6474fe3d88e1d28b942a973e0f6ee12a0d3f4c39a85fad442443c600f9d86f3327435b8619566e4e0f2263baa604a741f8f51e4d33bf11011d2fe6ec05e0e8460967db94fd5f073feefc94325c612e87678d15ce60b991edc787474d60545028f1efc449788a3e17f8f186991cf3d8527a8db1739bc8435b9d451fc4404ea89127db8f59f064305e38a71968e4d904cddb581253ded3a56a56bfa37c9854488817d5751131bc026002c65862ce6aabca4266fc6e163fcdb4ed00391fc0dd34e0b8707c3f1a475eea46e66a4ddd0a366214f4ba02d9c9ee44056284afefed44a1570d072b1372d411329bc877efa58709a74440df68c8592f4c2f77c948cfd44f402f3ba09375c4811174fb0ee9df1b29013894afebd4e169111df914c8ab84c30bb473d1c156140b3bb0bee6f5f73c0cb57c051f226b10c1f8c0b421ada20733fe0dfb12396fa7722095008eee677a19066fd01dbe0a9addd080fdbd0d17bb95a465602f41e4eb95576c9c526583c0f87d27335c398c9a7da807d2a36476777866a6f106b732f1491b2e9a73c2f1eb22a153ba2d0936f7527c8252e5db39d7ca3821656d2e40a117d270c47088c2c1a6bbaf3735602f589a21af61b277c06c9839619412bccc454acdf273dd20f4262a24140a8fed13fd347162c082073620eada8e5c5e5c388486720509a4934be019848f052383586481672538f2abc3583b2f4a7fa739c16e8ce0a671c0e3d1d5418e2f49c363592c056db7e492c6d6380cf8ba3f3daede120451ec735e600e7dd30396c388ef2e90a1950ba1aadd8c14999e4ccfae488b11c16c064ec862526025a6fdf17fcc3ddc955576d458381d75de8e049d590f90863f0877cefd1bee31b8c4e09f087eef390fe91d6d862ac4b6f83bc8ad4ca2a7caa9a01bb278b81bc8707d74e434c5c8441e78f21aa054bb37f48a7cf8a77c1076e64f00b4bf5709b14f475dffd616c02e78af29be24d4e8fbc3867ff8afbfae37419bb8488ea64022e725ead53fdb0017e29fddc6b41bc9955e05a37dfaf41d7235eb9adbb55b0bf40c32fce23b3201a2eb36258191f8ebd407fef9a036ef85b87757bf88076d478d9a921ba885e707864b9d29b642ae18c29dc20a6e540ac24372fbd7f5b1ad0d485cf1b2cd18f79d122766e68c534ba4bfc4e01ac1e6fbb33fd33d6d8381506495cbeddf2c287691aa5de0d3cf879846a1b044e29e94f590befe1a4085ce375336770722b4893df0f9974cf18c87a8a0b14d7d48b2606e82ea74b09804638d66c16c6440e7cfa7c379c36a643d601abf5fc67e68971d947d4a74a379810917dec44e546a9ab6b216fe47773cbdc1c712af55a4a77d31baf26585d53b7c23a8a5d168fac9cc222c5a1bdf596e6bad052dc8898e16f18c72cc4923113a5199b606fc46b1cfd08731fb7feeb84e80b6ef32c63c2da85a007be319755bfa961a64ca829fb7263f0056382fea16b961ffd7c9efc6fc362e65422c42444e00f6e746d442e6a1cc9a4b780806b4d5bc6a0cf7dde812db5e1119418c13843c708b2faf2bbe3453e53e453f504496f876503f44a8afb5065d8655f9e52e9b0452a4a3697d983fef8ea601ee11a62ca5fee34ca46f503f214650535740055b73c04fec961673c4e440c1a18f0f248f805242e1efa1f06fb933ff205ac984d5c9a92cafc28ad506b47fe8535b71129feb77c1b9268dad5242f1c39a474845f6cf3639d9b008cb644643bfec10f4025ea342c196f86f9e1d3198067ed9f703bbeb1be723c8dd9e360e724bb754c6dab2253bdab644edfb76b3aa774c97a8d1beef7cfdd7b090821d8a1d7e70d0aa5bc89f1a2f7af3509e190fafd5feae8d89bba26f48084ffab115b1d17609656a1ee22204c502b0dc22489a2fc78e68ea3de24fb161c508ebda2b1fbd89431af46759a9be12841b8323ad3df41c1ddaf7d79c46807dbd86d23341c0bee36d5d7030bbb4ba9542cc2c0b6a4a5de2b0c421849204abb09059eccc41f1ee5f57e079777c4200139b9145eb63dfa627bd64ced261ed03e3a356756dee3ed56c65c2052775a99930b4f6644b29e94304edf40a6f2ce06135f90c6cf4a474f77af19b40ef92f84bbdd27a615648ad08a42e6f0b68b2f6b7a64f0db9dc025e1967be3243ba6e20188bf1d328941cae958fe0249f3b8e3bb634e285192c4fe14e51296385f048fbad4ec4fa5ff626c4f75f3963462030f41b3dd810d4b988d2dbc20258ca5ce32a0e0c4d2608844f2ca36de8d5be8d201c83ae7b19ad22d4186aa6f979d8c8f620c06840f7df2807c379ce05263479c3544fd8774eae12dad36d046255fae1fe55a880458776a93f77ff142599afc47eccaba1dc170f12bd26d4995ab8cae66a4e6ea8a86e420f97a00307a0d3f40da3eccd3fc2b75f7a4f590deb571da955dad84d43284bf62a744bc52b565ae0902bd85e3c9a228e943ab89f54f2ff9a37151bd3bdda685c9c25ead55ad24190ac6353483853f8fe263a897eaa332d938ae915399995e0fe2985465d39b277c71984174cc84e8cb82f588c86f8eb51373f17060d6f6b60227b7f41a4e8a871a98cbf7f2576fecdc5c44c6a84d3602d6594d383c5a22637bee1fb20e94a9bf95c8637ff0121d51ac44e92b1785ac2afa060b25be739e3590523e68e8fb73e925b97b8731ea828e179fca22541eaaebf81fd08dd73cacbd7dcb7127aa96bb2ffefb6845d9db0d030488c5b00fdf8898fb881f68381be52b84957bcdcfe630244f6bd261bb023b194386d1f55394622a54b5da751ff514b45eb0ca843652bb65ee535ac6b460aca0a8f37fb232f3288d68bac44e67d9108c63de8de88ab401914842c3bb0dc6417b724ae9e044a2d3b4bb90cee6376d3c999e451f5e0a12c0ef1fff577fcf8ecf00b5eec685aa2c2fbb79f4cc31d4801bea2d7e2189b8174ecf5c0541f883bf67bc864d6f076cca683e9513c750b3d07e150240e71451ea3426b86288b8b3a14afe003b1400488a78cefb3baa6507af304fdbed0ed2841588f51db3eac6890d9bf0c85550534dfb91ac482948355b1e39288e7a0b199747b5de4dfb2f1140b5bdba0815599fe4cabb47d4cc2d09269eae6d8c487b90e7ed6ce381cd89e7a220cc80feb1d601783e7dcdb0dfcdde684012b80bc303089134e7c571f0ea1f72a769fe968b5d01547d771b130e38b44eb9b9230a3bebfea4744dc28aafa68f08859a807d8eb1fb3220608e3faee7a9a5974c259c6cc5e910bfaf13f495cf9bba3398b191423ab03dc0839b857daddb5302138e635c3282d86091dec57cb151159d2344d4702aaa7f07464772cd57ff346166ed8648ac1c5c19ee81495b48fcd4380f0ef865e87efff51c0e5f67f4dc524c005ae0998f7ad4e4b2f53f937d1e328c98fcd2d075d74212cb9b690f234a9d7fc49e1780496ba1d882ac4414213b8cca0a1585d241b367cd498c389b346c6c631938a828c868348e8a500f384c1d1b43f05ab175739215931867ea8df3485a41565dd23c19befdeb28a3862c67ffc9eacf2a57d5e557263b1fdfe5427dc25b1f64e7ca07b308970fac75167c53128f5bbdbdacd0ecfbdd2c0d484ba918dfaaeeb11e15f95c80e16244b0f91210a2ace0b090ac6d61197e72e903c8cf0bef90cfe8f6625bc77102f92572eee043623c00a3bb82e20f647500edf9988aca192a252987236259b45f80998f8a358864c575ddd9376f29f0bf30ceaa121742806911d2ae5318c4f391bfe53c0eb6e6c46a224db549a61e3aa604a02ce90cc4519f4e76c57bf45a2eee91e127a1ab08a70a043c4beb8787b5350a1617bf0c64d50b0be00d556de7929e9cf402efc054e70db7611a74bd2810f2ac5c858cb99e53cd4c93cb47c047f8a89e89361ad4537c56f6311eb3238f67ba8e9871cccf61c21d02125da463ef7d9edb1a6ddb1554be7819d96dfd24a797d25256814244857ab13ec949052760d3e84a0f8f16d490baff776eafd0ebfbd4bf5f30f590c7f178e2be98bc54af75f34d66385af4b3ef7e96f9cd7e82bf5c1bef7a1439802794921bf523adf76ee1b3d9c3c378a93f19d29ec5a5a715d45e8bd4c00fd93d71df2efc129a7945fd593aaf6f43c340e1b2fcb302c363f18ec801b3145b6bb9bb923ac77db0b0127b29f79a37e266a89b5dd9efc3924b36a59ed93635d954f5f9aa3c0871f1c29498a3e4cf248b60730808380e1b1ad8733eece688baaa5469e39da7330d1242b30437fdf5a5a29c1809d8d0e06548669cbd978a0b733af2453d1ef0fb1b95499ffd8f313f3c3adc85ee0aee8d28179730e617574ae86752080f81c12291528295c58ddb265da366ba8e61a1bda1987bbe79b9766600b1f91c091deafb55d441ebeaaaf8c0e802b621f7c6ba62b2e9f0923a079c2f6d451e9c71764a9efbe1988636c7f42b9cf02bb6d43a24edd9b2cf7ee369bfdfe70b0e21c11ec4c150e4baa0725540ee197008eb4e148c0eada247e7a616d8ad98730c934bd042cb9cf825bfb800cbfad986494bfd1ece3a6a39339321df9ff888317bf072b588fe194ab5ae8f5afe5ad0c4638a7e5e70b2e64a2932bd8863149ece9e77b5887149e0ca6ef137327da66df7b90a50a807c980c35be9d23fdd0196d18ba8dd5b781f572bc35af6eb861bed9bdb9d4ee429f5376681d027b3c43b5654fae9eac316fa6d356d051879b5f33fea57135df68f7984abc740bed67f8882e22f1f58e22fed516de03b06726214ef37cbcd708573e12d7487657b5264875859cf8583b9e4bd750f8e5381b7a67849da2134f130ee647868debc2ecd9a46821d326f3c4eeb62b722b7f7deb75209ee7621e3b17b1e3b2fffb5a69c47159f1e0e00cfddc6f64ba769f6f65c99643ee6f367bf82ca673c991b7be41bd4f0450e130771df8f3ac35e1830a275d5b962bb00daba0945534ea4c05f8a0c1b2fbe69a902d46aac5b824d608f278cf738d258610e7f2ab23c730c44bbfcb938e69201d8b1749d8b70857a31d5d712c9da15e4fc792706b64a3bb1a26269f9cf22bbf54191d5488a", 0x1000, 0x800}], 0x2040010, &(0x7f0000001380)='/proc/capi/capi20ncci\x00') lremovexattr(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)=@known='trusted.overlay.origin\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r5, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x3ff, 0x80, 0x4, 0x80000001}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) 00:09:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x22, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:09:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @timestamp, @window={0x3, 0xfff}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x4, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd5c2}, 0x0, 0x0, 0x0, 0x2, 0x3ae}, 0x0, 0x2, r3, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="2b04f2ffffff0080000001020000000000000000000000000017"], 0x2c}}, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}}, 0x4c8c0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) [ 314.104937][T12247] tipc: Enabling of bearer <> rejected, illegal name 00:09:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @timestamp, @window={0x3, 0xfff}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$snddsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x800009, 0x110, r2, 0x8) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1081}, 0x0, 0xffffffdfffffffff, r3, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0xc800, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) bind(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @rand_addr=0x64010102}, 0x1, 0x1}}, 0x80) r6 = socket$inet6(0xa, 0x6, 0x0) close(r6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x109) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2ca097124e8d07c5}, 0x20000000) dup(0xffffffffffffffff) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000340)="d1d27d320b42ec83bc6f24eff7b40ab102050d892786da6bc2152df6010f1a1e1fd9331d80b7f8d55e18cecb0b3f248f98382b66dc1ce91b3d7fda35ed2ed932624b6b0cc8c075fd493c1d1e3da7769d89e86a64ba213061c9391a7067da6003551c958222dc0a7b225b086046b343093d906b8587ddf753964469f2abc5a528910ca7682d480d162ad2f1959e06528ce19757a5ca04c3af1c4525546e083611697ff9e59074fffb124e7aefd5e39277183fdf51d0c0fbc57c73201aba20", 0xbe) [ 314.199831][T12257] tipc: Enabling of bearer <> rejected, illegal name 00:09:40 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x10001, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001f0012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38001e31a2b1ac10ff8c363a00002400070500ff004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000002c00270d40000f0104c4faf415f5f7eae8d7c1d3dd0c8dde0000", @ANYRES32=r4, @ANYBLOB="0000000000000000040000000a000100726f75746500000004000200"], 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 00:09:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 314.408177][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 314.439118][T12275] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.5'. [ 314.468225][T12277] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 314.529337][T12287] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 314.538975][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 314.584030][T12277] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.5'. 00:09:43 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x90940, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000040)={0x12}) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:09:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x101) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={0x0, r5}) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x7, 0x0, 0x1, 0xffffffff}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000040)={0x81, r7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x4) r10 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r10, 0x29, 0xc8, 0x0, 0x0) 00:09:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/123) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1f, @mcast2, 0x6}, @in6={0xa, 0x4e22, 0x5, @empty}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}, @in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1f}], 0x80) 00:09:43 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000ba51c540d2199200ecc1010203619665020001000000000904000000ffffff00"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x31ba, 'syz0\x00', @bcast, 0x1ff, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast]}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:09:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4a, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:09:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) [ 316.836238][T12318] validate_nla: 10 callbacks suppressed [ 316.836247][T12318] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:43 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:09:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x1, 0x0, 0x0, 0x4, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) close(r5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x6dcd3be3080c84d0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000b1400022bbd7000fbdbdf25080003000000000008003f00000000000800010002000000080001000000000008000300000000005fde78f5aecaa2cc549288021b9a5b8587"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup(0xffffffffffffffff) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) dup(r8) 00:09:43 executing program 0: r0 = socket$inet6(0xa, 0x80000, 0x3) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) [ 316.946651][T12332] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4c, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 317.110670][ T8921] usb 6-1: new high-speed USB device number 10 using dummy_hcd 00:09:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000080)=0x81f) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept4$rose(r4, 0x0, &(0x7f0000000000), 0x80000) [ 317.273746][T12358] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x800, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000080)=0x400, &(0x7f00000000c0)=0x2) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)=0xd0) [ 317.405569][T12371] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 317.421901][ T8921] usb 6-1: too many configurations: 97, using maximum allowed: 8 [ 317.570804][ T8921] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 317.578438][ T8921] usb 6-1: can't read configurations, error -61 [ 317.770611][ T8921] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 318.091066][ T8921] usb 6-1: too many configurations: 97, using maximum allowed: 8 [ 318.210665][ T8921] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 318.218271][ T8921] usb 6-1: can't read configurations, error -61 [ 318.225051][ T8921] usb usb6-port1: attempt power cycle [ 318.940570][ T8921] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 319.070447][ T8921] usb 6-1: too many configurations: 97, using maximum allowed: 8 [ 319.190457][ T8921] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 319.198091][ T8921] usb 6-1: can't read configurations, error -61 [ 319.350384][ T8921] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 319.480676][ T8921] usb 6-1: too many configurations: 97, using maximum allowed: 8 [ 319.600679][ T8921] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 319.608283][ T8921] usb 6-1: can't read configurations, error -61 [ 319.615123][ T8921] usb usb6-port1: unable to enumerate USB device 00:09:46 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x210000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x7) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:09:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x60, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:09:46 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) shutdown(r1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:09:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:09:46 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x0, 0x0, {0x6, 0x2}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xc0, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) 00:09:46 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x37) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) [ 319.859020][T12394] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:46 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2b04f2ffffff0080000001000000000000000141000000100017"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000001440)=ANY=[@ANYBLOB="0876dd84cb995df84bba39b4", @ANYRES16=r5, @ANYBLOB="040026bd7000fcdbdf25010000000000000001410000002000170000000d000000206574683a7465616d5f736c6176655f3000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x10000000) sendmmsg$unix(r3, &(0x7f0000001400)=[{&(0x7f00000001c0)=@file={0x3, './file1\x00'}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000240)="1f098cce870079c2702f0fd21f9a2ce167968ba290a3ea331ddb4206b8f59b56c567d98aefb38e0107191981d8d5c3be75c6f63d6418193f58be", 0x3a}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="269b69afefbf15d880844c554796dd37f98bdeed97f25f40fafd01d964a301562c4b4c1077ba15154c6f15ea2833448ee6268c71d9266377482b2039245b615b908f105bdedeed889de56c26289ac5ee367f4c5853", 0x55}, {&(0x7f0000001340)="2e3d5fa35e83270ec0dbedc708a9b21f481281756983c649cea53feebd3a23918a1a3d1ad0eeb015685ee6b301ae68b598c30555a97b27583c4cc3a9b608591771d3dc5dc6e29d0902f39fd78cce6c9e83ae3f230f3d5959b1eaf32b", 0x5c}], 0x4, 0x0, 0x0, 0x4004001}], 0x1, 0x40000) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 320.094036][T12408] device vlan0 entered promiscuous mode [ 320.128243][T12415] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010601010000a1000000000001000700000000f9794194c4"], 0x1c}, 0x1, 0x0, 0x0, 0x40884}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xd, r5, 0x8) r6 = socket$inet6(0xa, 0x6, 0x0) close(r6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) [ 320.357410][T12408] device vlan0 left promiscuous mode 00:09:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x401, 0x789400) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000280)=0xe8) r7 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fstat(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200042) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@rand_addr=0x64010101, @in6=@dev={0xfe, 0x80, [], 0x23}, 0x4e24, 0x3f, 0x4e20, 0xfff, 0x2, 0x80, 0xa0, 0x2f, r6, r8}, {0x4, 0x4, 0x575, 0x6, 0x4, 0x71, 0x7, 0x3ff}, {0x7, 0x5, 0xae3, 0x9}, 0x3, 0x0, 0x2, 0x0, 0x1, 0x3}, {{@in=@multicast1, 0x4d2, 0x32}, 0xa, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x3500, 0x0, 0x3, 0x0, 0xc2, 0x7f, 0x2}}, 0xe8) [ 320.502918][T12423] device vlan0 entered promiscuous mode [ 320.516995][T12428] tipc: Enabling of bearer <> rejected, illegal name [ 320.525915][ T8921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 00:09:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000000)) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:09:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x68, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:09:47 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x210000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x7) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:09:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat(r3, &(0x7f00000000c0)='./file0\x00', 0x410040, 0x78) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x9, 0x40, 0x1f, 0xe1, 0x0, 0x1, 0x200, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x10001, 0x8001}, 0x1c240, 0xffffffffffff7bf9, 0x0, 0x2, 0x7f, 0x8, 0x9}, 0xffffffffffffffff, 0x1, r4, 0x9) r5 = socket$inet6(0xa, 0x6, 0x0) close(r5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:09:47 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(r1, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:09:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0xf02, 0x0, 0x0, {0x5}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x3f, 0x5, 0xa7d, 0x4}, 0x8) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xc8, 0x0, 0x0) [ 320.682275][T12447] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 320.777548][T12462] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x48180, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/4096) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:09:47 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202eda930809c0ea9e0d4510cc587b68c6a072daf2d89982ac7d1e2f1a79501f5befa9961071e1e3ad396522821683bb49794aa0a74be1b275e68d745ed82582fe2a9de3afeea603b57ddeff31a44c4140dec503612a23f455ee12bf"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 320.868947][T12459] device vlan0 left promiscuous mode 00:09:47 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_opts(r3, 0x29, 0xd, &(0x7f0000000000)=""/186, &(0x7f0000000100)=0xba) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 321.118795][T12468] device vlan0 entered promiscuous mode 00:09:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:47 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x84440, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept$packet(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x14) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x10800, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) write$qrtrtun(r2, &(0x7f00000001c0), 0x0) close(r5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) open(&(0x7f0000000100)='./file0\x00', 0x8400, 0x2) 00:09:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6c, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:09:47 executing program 0: r0 = socket$inet6(0xa, 0x80000, 0x803f) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:09:47 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x210000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x7) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:09:48 executing program 0: socket$inet6(0xa, 0x3, 0x3a) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_int(r1, 0x29, 0xc8, 0x0, 0x0) 00:09:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) [ 321.379203][T12503] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 321.455912][T12506] device vlan0 left promiscuous mode 00:09:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000000000)={0x9, "b98ea2f9584ea8b64f4b33148a2254c350714feb138e2e0fe179622fb2cae03a", 0x40, 0x5, 0x9, 0x2, 0x3}) dup(0xffffffffffffffff) [ 321.632690][T12515] device vlan0 entered promiscuous mode [ 321.660649][T12522] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:48 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x210000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x7) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:09:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x74, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 321.925664][T12536] device vlan0 left promiscuous mode [ 322.081116][T12538] device vlan0 entered promiscuous mode [ 322.104132][T12541] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 322.355747][T12541] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:50 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x0, 0x0, 0xf, {0xf, 0x0, "fd96b4db42c4f523479b6373e9"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0xa, 0x91, {0x91, 0x3, "7d517c1f3bcdbb484b8df7a04cf6ba98e4d62a70c49700ca52453271399ea362234604e5e223e980dc39efd656400d37f8567b8f8dbcacf8f4cf23c7e992ca190609397bb2a2d4dda0863bb921b1b338433cd1411f99572ffc88964f21251b61adac5c0c2ec19d721d4b807423c4092c1829ff2e6b160d3c393bcfcdffae21571f892dd417ec995d8a4488ad7dba9d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0x18, 0xc8, "cd2435eb70ec6e8b1a2d376edb639eb0a2c53b72a5f071dd62e7cd14842c8072aae8ef18e3c33d0a06034b20aaa6e357b9f5d80a3448b3c599d27d43d7db23e9c77df558018b7b889ddeb51bb2752e006a6ec437ff987fadc59444aa5e10410b92af2d8cd2fb2a3b157a2d24bb7bc00507a478ab7d41a7a8e9426ab8c443aaec52e480d01295e9bcf9947ae54a9bc1c181d1774d08a41f50f60928b6b0ae9b92ed17f374644f0d49990b2afe0bd7e0944fb0e9e0de95717c980c593eba416f7081fde149a6a984dd"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}}) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xc8, 0x0, 0x0) 00:09:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0), 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400206) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1, 0x8001}) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)={0xfffffffe}) dup(0xffffffffffffffff) 00:09:50 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x210000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x7) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:09:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x78, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:09:50 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x900100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000001680)="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", 0x801, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000200)={r2, r3, r4}, 0x0, 0x0, 0x0) r5 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fstat(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r6) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000004c0)='./file0\x00', r8, r9) keyctl$chown(0x4, r3, r6, r9) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 324.090192][T12561] device vlan0 left promiscuous mode [ 324.156862][T12568] MPI: mpi too large (16392 bits) 00:09:51 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RAUTH(r5, &(0x7f00000001c0)={0x14, 0x67, 0x1, {0x4, 0x1, 0x6}}, 0x14) r6 = socket(0x400000000000010, 0x802, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r7, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0xc015) [ 324.316485][T12569] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 324.350335][ T17] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 324.374282][T12567] device vlan0 entered promiscuous mode 00:09:51 executing program 1: r0 = gettid() r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101580, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0xfffffffffffffffd) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="2321202eda93089692ea9ede055b0fbec6f2f012c6c9bc69e3cf4266c74afe0a4a2e70010a5d85c584c2b5add3"], 0x194) close(r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0xfffffff, 0x9, 0x401, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990afe, 0x7f, [], @p_u8=&(0x7f0000000040)=0x6}}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) fcntl$getown(r3, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$FICLONE(r5, 0x40049409, r4) [ 324.423514][T12569] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x800, 0x40080) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000080)={0x12, 0x1a, &(0x7f0000000040)="7b15514d899bd66baa9324ba1a3f9d2152a5d9fc62031d7f1c8d"}) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:09:51 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x210000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x7) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 324.498381][ T8926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 00:09:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7a, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 324.630246][ T17] usb 1-1: device descriptor read/64, error 18 [ 324.639686][T12601] device vlan0 left promiscuous mode 00:09:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x5, 0x1, {0x3, 0x3, 0xac1, 0x0, 0x7f}, 0x8001}) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000180)={{0x8, 0x4}, 'port0\x00', 0xc8, 0x4, 0x40, 0x7fffffff, 0x9, 0xfff, 0xe70, 0x0, 0x1, 0x8}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) r4 = dup(0xffffffffffffffff) ioctl$FBIOGET_VSCREENINFO(r4, 0x4600, &(0x7f0000000240)) [ 324.851647][T12603] device vlan0 entered promiscuous mode [ 324.884497][T12607] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) [ 325.019876][ T17] usb 1-1: device descriptor read/64, error 18 [ 325.163985][T12607] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 325.303273][ T17] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 325.580065][ T17] usb 1-1: device descriptor read/64, error 18 [ 325.980013][ T17] usb 1-1: device descriptor read/64, error 18 [ 326.101020][ T17] usb usb1-port1: attempt power cycle [ 326.829701][ T17] usb 1-1: new high-speed USB device number 4 using dummy_hcd 00:09:53 executing program 0: socket$inet6(0xa, 0x3, 0x3a) 00:09:53 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x1}, 0x0, 0x0, &(0x7f0000000180)={0x7, 0x0, 0x20000081, 0x6}, &(0x7f00000001c0)=0x8000000aca7, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x400c00) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, r4, 0x0, 0x5, &(0x7f0000000580)='eth0\x00', r3}, 0x30) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x40, r3}, 0x8) dup(r2) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x2, r0}) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="23a1202eda93fdb5760809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:09:53 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x210000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x7) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:09:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x2}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, [], 0x1}}, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xd9}], 0x64) dup(0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000000)=0x3f, 0xffffffffffffffff, &(0x7f0000000040)=0x80, 0x397, 0x4) 00:09:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 327.019781][ T17] usb 1-1: device descriptor read/8, error -61 00:09:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x10400, 0x0, 0x80000001, 0x0, 0x2000000, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) sendto$unix(r1, &(0x7f0000000240)="a0d267f0fa36a94f4a1e029b3e815cec6e647ccc4aa2842af1b21611141b55e0e4bd9dd4b54df7044c8c540a6c34ba8913402b6dadd61c6e8cba22c019eba2a71006bc81051d7e94dbb8fa15ec939b204ee27df85b85e735c8ade3b17dff2739acb1c5dc969439b80505bb5d9234002240ed045d2ece6ffa672bbf827fbc7741c771b59e61edca73eb7fa79ea88e07f21fdc22", 0x93, 0x20040040, 0x0, 0x0) getsockname$ax25(r1, &(0x7f0000000000)={{0x3, @netrom}, [@rose, @rose, @rose, @remote, @rose, @netrom, @default, @bcast]}, &(0x7f0000000080)=0x48) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x8200104d) dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f00000000c0)=[0x0, 0x4]) [ 327.113595][T12642] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 327.149137][T12641] device vlan0 left promiscuous mode 00:09:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) [ 327.259859][ T17] usb 1-1: device descriptor read/8, error -71 [ 327.411442][T12655] device vlan0 entered promiscuous mode [ 327.443986][ T8926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 00:09:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000040)=@phonet={0x23, 0x7, 0x8, 0xe5}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="565a3875abec4e31f62bc2fac39caa58322450a0e0f4cdf7a731d58d529959710207a27b42cd0515d6db88da0587026b31ca24ed74cc4f97df210261cf24398a5f4b589d8478964a84f0c2", 0x4b}, {&(0x7f0000000180)="43d0f95857a3d74aad4f241a82df8090a94b7b07b4be0f2fcff4cb5d953a70e7115eb19bcbdbff41", 0x28}, {&(0x7f00000001c0)="90ed7c04bccd34be2b0853b71436da3e4d7e7d55dd443a1c29b6bd0c50b3fb2097d11ab8fa4222142bde46443a0b4bb50deae81b887b7cf2866a8911a76f4f6c3f333a93ecd39a7ced81dc89086ac42e82cacc4f7c6b714f8af0f1685b12df56c952efe7338ab10e71894d4e284bddac088905dc02963eec777e89033b8fcd358738127683cea407cfb6cea5955577963ad9012ee44d17efa3f5de655d6ec8f61b192dbe41b5784a4a22dd5011106458492c02b479d979648856b0b168260efcd9e809b861391d9c514710365bb412fb89", 0xd1}], 0x3}, 0x4040840) r1 = dup(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ttyS3\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000000)={0x6, 'rose0\x00', {0x10001}}) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:09:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7d, &(0x7f0000000000)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={r4, 0x430a}, 0x8) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xc8, 0x0, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20000, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x9, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4008011) [ 327.480745][T12667] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:54 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x210000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x7) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 327.691000][T12676] device vlan0 left promiscuous mode 00:09:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x6, @private1, 0x1}, @in6={0xa, 0x4e20, 0x7f, @loopback, 0x1}, @in6={0xa, 0x4e23, 0xffffffff, @private2={0xfc, 0x2, [], 0x1}, 0x100000}, @in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e24, @loopback}], 0xa0) dup(0xffffffffffffffff) 00:09:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x11c, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 327.859762][T12681] device vlan0 entered promiscuous mode [ 327.976950][T12687] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 328.080163][T12695] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:56 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2921202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) read$usbfs(r1, &(0x7f00000002c0)=""/203, 0xcb) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:09:56 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x210000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x7) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:09:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000000)={0x0, @bt={0x8001, 0x50bc, 0x0, 0xf9a43b072c9d593c, 0x1f, 0x1, 0xfffffffe, 0x6, 0x80000001, 0x7fffffff, 0xf1bb, 0x3, 0x7f, 0x41de70db, 0x1, 0x0, {0x0, 0x6}, 0xff, 0xfd}}) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) close(r4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) connect$ax25(r5, &(0x7f0000000180)={{0x3, @default, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x294a40, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f0000000200)=0x7) dup(0xffffffffffffffff) 00:09:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x125, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:09:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:09:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0xfdcc) [ 330.127707][T12716] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:56 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2309c0ea9e000000000000"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 330.214113][T12727] device vlan0 left promiscuous mode 00:09:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000000)="f7", &(0x7f0000000180)=""/4096}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) [ 330.450286][T12715] device vlan0 entered promiscuous mode [ 330.473350][T12750] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:57 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) r1 = dup(0xffffffffffffffff) accept4$x25(r1, &(0x7f0000000000), &(0x7f00000001c0)=0x12, 0x80400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x401, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x20000804) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000002c0)) ptrace$peek(0xffffffffffffffff, r4, &(0x7f0000000040)) 00:09:57 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x210000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x7) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:09:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x914c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4f46}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x4, 0x0) close(r2) open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) r4 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fstat(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r5) open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) setuid(0x0) setresuid(r3, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) [ 330.653172][ T8480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.672531][T12761] device vlan0 left promiscuous mode 00:09:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x12e, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:09:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x6, 0x0) close(r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) [ 330.856549][T12765] device vlan0 entered promiscuous mode 00:09:57 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x210000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 331.033161][T12778] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) [ 331.160951][T12786] device vlan0 left promiscuous mode 00:09:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = pidfd_getfd(r1, r0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) close(r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$GIO_CMAP(r8, 0x4b70, &(0x7f00000000c0)) dup(0xffffffffffffffff) [ 331.439708][T12784] device vlan0 entered promiscuous mode 00:09:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) [ 331.486104][T12801] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:09:59 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x210000, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:09:59 executing program 0: r0 = socket$inet6(0xa, 0x800, 0x8) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:09:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:09:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x13a, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:09:59 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) 00:09:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x7, @remote, 0x80000000}, @in6={0xa, 0x4e24, 0x4, @private2, 0x805}], 0x38) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x20400, 0x0) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x399) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000000)={0xffffeb8f, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x7, 0x2, 0x1, 0xf7, 0x0, 0x8, "4c4cf076"}, 0xfffff1f6, 0x2, @fd=r5, 0x10}) [ 333.359842][T12826] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 333.460008][T12841] device vlan0 left promiscuous mode 00:10:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:10:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x17c6) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, 0x0) 00:10:00 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000080)='GPLGPLtrustedbdev', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000240), 0x2305e2b7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x1, 0x1}, {0x4}}], 0x8) r6 = dup(r3) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002c00)=ANY=[@ANYBLOB="90040000000000000200"/124, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/144, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000110000000000000047504c47504c747275737465646264657600"/163, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev/cuse\x00'/160, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000e0000000000000076626f786e6574312c2670726f6300"/160, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000004000000000000006264657600"/152, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000200000000000000274000"/152, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000f000000000000002f6465762f73657175656e6365720000"], 0x490) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:10:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xb0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:10:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="00fba70e200607a973d20ebacbb74c66a6dab325e5d1edc9a7a2faf680b8f8b744e1"], 0x20, 0x2) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:10:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) [ 333.770266][T12825] device vlan0 entered promiscuous mode 00:10:00 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 333.831448][T12868] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000000)=""/78, &(0x7f0000000080)=0x4e) r3 = socket(0x2c, 0xa, 0x2b) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000000c0)={0x4, [0x3ff, 0x3, 0x4, 0x5]}, 0xc) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:10:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x2b84800, {{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x27}, 0x77c9}}}, 0x88) setsockopt$inet6_int(r0, 0x29, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) accept$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) [ 334.033582][T12882] device vlan0 left promiscuous mode 00:10:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x14c, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:10:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000004040)='/proc/capi/capi20\x00', 0x20000, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000004080)={0x0, 0x3}, 0x8) 00:10:00 executing program 0: socket$inet6(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_int(r1, 0x29, 0x42, 0x0, 0x53) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 00:10:00 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 334.333354][T12897] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 334.441708][T12902] device vlan0 entered promiscuous mode [ 334.493713][T12909] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:03 executing program 1: r0 = gettid() ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)={0x1c, 0x20, 0x9, "156a412714574fc75be349d71cf315bdbf76310b754256d09ef975b3"}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000140), &(0x7f00000001c0)=0x4) prctl$PR_SET_PTRACER(0x59616d61, r0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x5c, 0x7, 0x80, 0x4, 0x0, 0x8, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3981, 0x2, @perf_config_ext={0x20, 0x2}, 0x1010, 0x7ff, 0x9, 0x2, 0x7, 0x994, 0x1}, r4, 0xb, 0xffffffffffffffff, 0x2) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:10:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mreqsrc(r6, 0x0, 0x0, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) close(r4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:10:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:10:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) accept4(r1, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x80, 0x800) 00:10:03 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x181, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:10:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x4}}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x25}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x4}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'macsec0\x00'}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x5c}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x811) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) 00:10:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) flock(r0, 0x5) dup(0xffffffffffffffff) [ 336.718471][T12930] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 336.754656][T12929] device vlan0 left promiscuous mode 00:10:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x5, 0x1, 0x80000001, 0x7, 'syz1\x00', 0x2}, 0x4, 0x1, 0x9, r1, 0x2, 0x800, 'syz0\x00', &(0x7f0000000000)=['+\x00', '\x00'], 0x3, [], [0x8000, 0x3, 0x5, 0x2b]}) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:10:03 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 337.019189][T12953] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x3, 0x2, 0x4, 0x2, 0x5, {0x0, 0xea60}, {0x5, 0x2, 0x9, 0x9, 0x4, 0x0, "44041b01"}, 0x7, 0xc280191cf8171b7e, @userptr=0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f0000000100)={0x80000002}) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x9) dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x9, 0x10001, 0x4, 0x3, 0x7, 0x7fff}) 00:10:03 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000000)=""/127, &(0x7f0000000080)=0x7f) 00:10:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 00:10:03 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, 0x0, 0x0, 0x40010, 0x0, 0x0) 00:10:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1d6, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) r3 = dup(0xffffffffffffffff) r4 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x1, 0x4000) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x7d, &(0x7f0000000000)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000003c0)={0x8, 0x2, 0x8000, 0x1000, r7}, &(0x7f0000000400)=0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x22c, r8, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_IE={0x1f2, 0x2a, "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"}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x22c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040041) 00:10:04 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:10:04 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 337.481896][T12986] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, 0x0, 0x0, 0x40010, 0x0, 0x0) [ 337.636214][T12999] device vlan0 entered promiscuous mode [ 337.674049][ T8921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 337.695671][T13000] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$netrom(r2, &(0x7f0000000000)={{0x3, @rose}, [@null, @bcast, @rose, @null, @rose, @rose, @netrom, @bcast]}, &(0x7f0000000080)=0x48) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:10:04 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x6, 0x0) close(r4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) 00:10:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1dc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, 0x0, 0x0, 0x40010, 0x0, 0x0) 00:10:04 executing program 1: r0 = dup(0xffffffffffffffff) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r4}, 0x3c) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x4, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {0xfff2, 0xe}, {0x3, 0x5}}, [{0x8, 0xb, 0x2d1723c2}, {0x8, 0xb, 0x83}, {0x8, 0xb, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r5) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="23554980b9e45cda88c4f1"], 0x194) close(r6) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r5, 0x0, 0x0) [ 338.025728][T13022] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640), 0x0, 0x40010, 0x0, 0x0) [ 338.123328][T13036] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:04 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:04 executing program 0: r0 = socket$inet6(0xa, 0xa, 0x69) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:10:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1e0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640), 0x0, 0x40010, 0x0, 0x0) 00:10:05 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000002c0)) prctl$PR_SET_PTRACER(0x59616d61, r3) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="93080bc0ea9e0000000000"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:10:05 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 338.442845][T13059] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) quotactl(0x9, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000240)="d2643b3d88163506e8154946cf58c40833811f4b186c54394660ce6fe29e87fd731dd8f45e23fd8b7759997016f7621348ca5c16414846187612ea6bbb9d9a31b9d9bb3d775801ec56996fd8789ee5a44562cd459d0e4a838052c36cccc55fb79cb15cb064ea1e6d14e5") r3 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x7fffffff, 0x4040) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xc8, 0x0, 0x0) 00:10:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640), 0x0, 0x40010, 0x0, 0x0) [ 338.562597][T13073] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 338.635640][T13074] device vlan0 left promiscuous mode [ 338.844135][T13082] device vlan0 entered promiscuous mode 00:10:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x254, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_to_hsr\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0x625c, './file0\x00'}}) 00:10:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x132, 0x40010, 0x0, 0x0) 00:10:05 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 339.013810][T13090] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd415866", 0x132, 0x40010, 0x0, 0x0) [ 339.186408][T13095] device vlan0 left promiscuous mode [ 339.437174][T13100] device vlan0 entered promiscuous mode [ 339.448114][ T8480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 00:10:06 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x132, 0x40010, 0x0, 0x0) [ 339.515248][T13111] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_LSEEK(r1, &(0x7f00000000c0)={0x18, 0x0, 0x3, {0x6}}, 0x18) r2 = socket$inet6(0xa, 0x3, 0x7a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) accept4$unix(r3, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80000) setsockopt$inet6_int(r2, 0x29, 0xc8, 0x0, 0x0) [ 339.633953][T13121] device vlan0 left promiscuous mode [ 339.904986][T13123] device vlan0 entered promiscuous mode 00:10:06 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x1cb, 0x40010, 0x0, 0x0) 00:10:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2be, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x7) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x2189, {{0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, [], 0x1}, 0x1000}}, {{0xa, 0x4e22, 0xffff, @private0={0xfc, 0x0, [], 0x1}, 0x6}}}, 0x108) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) [ 340.332588][T13135] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x1cb, 0x40010, 0x0, 0x0) 00:10:07 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 340.440175][T13145] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:07 executing program 0: socket$inet6(0xa, 0x3, 0x3b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_int(r1, 0x29, 0xc8, 0x0, 0x23) 00:10:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x1cb, 0x40010, 0x0, 0x0) 00:10:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:07 executing program 5: socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 340.731812][T13162] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x217, 0x40010, 0x0, 0x0) 00:10:07 executing program 0: socket$inet6(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0) [ 340.882804][T13175] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:07 executing program 5: socket$kcm(0x2, 0x3, 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x217, 0x40010, 0x0, 0x0) 00:10:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) 00:10:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x325, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x217, 0x40010, 0x0, 0x0) 00:10:07 executing program 5: socket$kcm(0x2, 0x3, 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 341.107678][T13188] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 341.196612][T13199] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x4, @buffer={0x0, 0xa1, &(0x7f0000000240)=""/161}, &(0x7f0000000100), &(0x7f0000000000)=""/208, 0x1000, 0x10030, 0x1, &(0x7f0000000180)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, @fixed={[], 0x11}, 0x6}, 0xa) 00:10:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x23d, 0x40010, 0x0, 0x0) 00:10:07 executing program 5: socket$kcm(0x2, 0x3, 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x35b, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x23d, 0x40010, 0x0, 0x0) 00:10:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:10:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x38f, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 341.651393][T13227] device vlan0 left promiscuous mode [ 341.856957][T13232] device vlan0 entered promiscuous mode 00:10:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x23d, 0x40010, 0x0, 0x0) 00:10:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000300)={r6}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000540)={r6}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000000)={r6, 0x20}) dup(0xffffffffffffffff) 00:10:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0xcce3, 0x0, 0x3, 0x8, 0x3, 0x1f}, 0x20) [ 342.091207][ T8921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 342.120685][T13246] device vlan0 left promiscuous mode 00:10:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) 00:10:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000000)={0x4, 0x10001, 0x3f, 0x6, 0x5, "b094ede0a8ff2a4782ca25bcd75fc670372e4a"}) dup(0xffffffffffffffff) [ 342.721740][T13250] device vlan0 entered promiscuous mode 00:10:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 00:10:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000000)=0x6) 00:10:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:10:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3dc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:09 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat(r2, &(0x7f0000000000)='./file0\x00', 0xa0000, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) 00:10:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) 00:10:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000000)=0x9) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f0000000040)={0x1ff, "f648c75b65d5b4f228125cfded5120d2bae7d7cecbdf5b78754feb40a6853afa23b9e0f480772c24b30d74cb391199f49dc0c9d0d06a010e739f21ecb65edd416e170d63000251b4d33128378ab758c43d752e3537632460c92c972280a3b11eba7b006100c0ae314150c7ea2d9266711db7cafebd5373e8c63de6022d6db644"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x6, 0x0) close(r6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:10:09 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c63640000000000", 0x25a, 0x40010, 0x0, 0x0) 00:10:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000100)=0xe8) ioctl$SIOCAX25GETUID(r4, 0x89e0, &(0x7f0000000140)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet6_MRT6_DEL_MFC(r9, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e23, 0x6, @mcast1, 0x1}, {0xa, 0x4e21, 0x3ff, @ipv4={[], [], @empty}, 0x4}, 0x81, [0x91a, 0x1, 0x7, 0x3, 0x4, 0x7fff, 0x1ff]}, 0x5c) 00:10:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f0000000000)={0x1, 0xffffffff, 0xffffffff}) 00:10:09 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x25a, 0x40010, 0x0, 0x0) 00:10:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x25a, 0x40010, 0x0, 0x0) 00:10:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 343.667707][T13329] validate_nla: 8 callbacks suppressed [ 343.667715][T13329] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x1, 0x6, 0x6, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000f840}, 0x20008080) 00:10:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/607, 0x25f, 0x40010, 0x0, 0x0) 00:10:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 343.871873][T13343] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/607, 0x25f, 0x40010, 0x0, 0x0) 00:10:10 executing program 0: socket$inet6(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_int(r1, 0x29, 0x50, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r7}, 0x3c) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private1, 0x79, r7}) 00:10:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 344.164997][T13359] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/607, 0x25f, 0x40010, 0x0, 0x0) [ 344.258535][T13369] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pidfd_send_signal(r1, 0x9, &(0x7f00000012c0)={0x1b, 0xe7b, 0x20}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001240)='/dev/video2\x00', 0x2, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f00000023c0), 0x4) splice(r2, &(0x7f0000001200)=0xe8ff, r4, &(0x7f0000001280)=0x7, 0x7, 0x5) r5 = socket$inet6(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000011c0)={&(0x7f0000000000)="cf907e4257ef5a754e6028b140279ce53a072310b4f797c6cbf5599377c848c0137bc115af4a06", &(0x7f0000000040)=""/212, &(0x7f0000000140)="a354096ba5b5e20eddf6d070410d61213cf191e0062312a8701e1bce5c2e7b176f6c22cfd905a249a0ebc44b023ca1c03884ae361b396925078899ef15b12d376763fdf95aef05f4326d2b87b96d66645def448d168ab34f4dfb95bbff9cab", &(0x7f00000001c0)="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", 0x2, r7, 0x4}, 0x38) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001340)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$HIDIOCSUSAGES(r8, 0x501c4814, &(0x7f0000001380)={{0x3, 0x200, 0x2, 0x6, 0x6, 0x9}, 0x250, [0x3, 0xfea, 0x10001, 0x1, 0x6, 0xfffffffe, 0xfff, 0x4c6b, 0x1000, 0x7f, 0x0, 0x80000001, 0x40, 0x7, 0x80, 0x7c, 0xffffff80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x81, 0x3, 0x200, 0x9, 0x8, 0x9ae, 0x80000000, 0x8000, 0x1ff, 0x4, 0x5, 0x6, 0x7, 0x5, 0x7f, 0x200, 0x7fffffff, 0x6dc0, 0x60000000, 0x3, 0x63e, 0x4, 0x6, 0xffffffff, 0x6, 0x7, 0x1, 0x5, 0xfffeffff, 0x7f, 0x1, 0xcd4, 0xbd, 0xba, 0x40, 0x1f, 0x8000, 0x7f, 0x5, 0x0, 0x7d20, 0xfff, 0x3, 0x8, 0x9, 0x200, 0x8000, 0x4, 0x7, 0x6, 0x6, 0x6, 0x3ff, 0xe3fb, 0x2, 0xfff, 0x6, 0xd0e, 0x80, 0x73ae81b7, 0x2, 0x8000, 0x81, 0xbf8, 0x5, 0xfffeffff, 0x3, 0xcf, 0x5ca, 0x3, 0x10000, 0x800, 0x0, 0x530e, 0x1, 0x8, 0xfffff622, 0x0, 0x3, 0x3, 0x3f, 0xfff, 0x1, 0x8d, 0x80, 0x7, 0x6, 0x100, 0x7f, 0x9, 0x6, 0x7ff, 0x9e, 0x0, 0x4, 0x2, 0x2, 0x80, 0x7fe0, 0x3, 0x6a, 0x3, 0x8000, 0x1, 0x15de, 0x6, 0x8000, 0x5, 0x81, 0xeec6, 0x800, 0x5, 0x2, 0x1000, 0xbbf6, 0x6, 0x100, 0x4, 0x7, 0xfffffff7, 0x0, 0xffffffff, 0x5, 0x41, 0x3, 0x81, 0x8001, 0xc7ce, 0x1, 0x1000, 0x8, 0x7fff, 0x2, 0x7f, 0x9, 0x6000, 0x3, 0x25, 0x7, 0xf5, 0x8, 0xf3b5, 0x9, 0x1, 0xef, 0x0, 0x431, 0x1, 0xbef3, 0xfff, 0x4, 0x21, 0x87, 0x33, 0x3, 0x7, 0x9, 0x6, 0x7f, 0x3ff, 0xfff, 0x7fffffff, 0xffffffff, 0x53, 0xfffffff7, 0x8, 0x7fff, 0x81, 0x100, 0x2, 0x5, 0x400, 0x8, 0x4, 0xd4, 0x7, 0xffffff00, 0x1, 0x5, 0x80000000, 0x1ff, 0x3, 0x20, 0x6a55, 0x10001, 0x3, 0x53c4, 0x7fff, 0x1, 0x5c, 0x6, 0x4b5, 0x8, 0x8, 0x80000001, 0x5, 0xbc, 0x8, 0x6, 0xffffffc8, 0x3, 0x5, 0x7, 0x2, 0x4, 0x7, 0x800, 0xffffffe3, 0x4, 0xffff, 0x9f9, 0x4, 0x6, 0x2, 0x8, 0xfa, 0xad, 0x8, 0x3f, 0x9, 0x5, 0x400, 0x0, 0x8, 0x5, 0x5, 0x1, 0x7, 0x0, 0x10, 0x63, 0x80, 0x7f, 0x8000, 0x10001, 0x81, 0x3, 0xffffffff, 0x7f, 0x4, 0xfcba, 0x2, 0x4, 0xee, 0x4, 0x22, 0xe8, 0x8, 0x7ff, 0xfffffffa, 0x81, 0x9, 0x3, 0x0, 0x5, 0x1, 0x8, 0x3, 0x9, 0x0, 0xff, 0x4, 0x6, 0x12b, 0x40, 0x4, 0x4, 0x3ff, 0x7ff, 0x8000, 0x101, 0x7f, 0x2, 0x9, 0x0, 0x2, 0x3, 0x9, 0x7fff, 0x4, 0xffff, 0xffffffff, 0x0, 0xffffffff, 0x1c, 0x7e6, 0x5, 0x8001, 0x2, 0x3, 0x335, 0x10000, 0x4, 0xb8b, 0x2, 0x0, 0x6a, 0x67d, 0x10001, 0x0, 0x401, 0xde89, 0x91a, 0x9, 0x1, 0x4, 0x7f, 0x4, 0xfffffff8, 0x7f, 0x10000, 0xd06, 0x1ff, 0x40, 0x6, 0xc3, 0x7f, 0xc6, 0x4, 0x0, 0xfff, 0x9, 0x4, 0x1, 0x2, 0x101, 0x200, 0x80, 0x2, 0xffc00, 0x800, 0x19, 0x7fff, 0x3, 0x6a1, 0x200, 0x2, 0x8, 0x9, 0x6, 0xffff, 0x5, 0xfffffffd, 0x0, 0x6b66f922, 0x8, 0xfffffff9, 0x0, 0x174, 0x5, 0x3, 0x100, 0x4, 0x5, 0x153e, 0x8, 0x75, 0x8, 0x0, 0x2, 0x0, 0x799, 0x5, 0x355, 0xfd, 0x20, 0x3, 0xffffffff, 0x4, 0x8, 0x7, 0xa0c, 0x8001, 0x3, 0xfffffffe, 0x6, 0xfffffc00, 0x80000001, 0x32, 0x101, 0x800, 0xde, 0x10001, 0xfffffbff, 0x4, 0x80000000, 0x5, 0x3f, 0x7, 0x9, 0x7, 0xd89, 0x80000000, 0x100, 0x0, 0x8, 0x9a, 0x3, 0x1000, 0x6, 0x200, 0x80, 0x7fff, 0x4, 0x8001, 0x6, 0x9, 0x2, 0x8010dc11, 0x3, 0x167, 0x3, 0x1, 0x3f, 0x100, 0x2, 0x80, 0x2efe4d8c, 0x4, 0x2, 0x9, 0x2, 0x3, 0xff, 0x100, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x6, 0x200, 0x1, 0xd400000, 0xee6, 0x8000, 0x0, 0x8000, 0x9, 0x6, 0x20, 0x3, 0x400, 0x1f, 0xf901, 0x6, 0x3, 0x8, 0x4, 0x2, 0x9, 0x1, 0x0, 0x3f, 0x6a, 0xfffffff7, 0x7, 0xffffffff, 0x8000, 0x2, 0x3f, 0x98, 0x3, 0x4, 0xffffffff, 0x79ba, 0x8000, 0x2, 0x101, 0x34, 0x8d0, 0x6, 0x2, 0x3ff, 0x7ff, 0x8, 0x5, 0x30f90437, 0x1, 0x233, 0x5, 0x62, 0x1, 0xfffffffd, 0x6, 0xf8, 0x36, 0x8, 0x4e33, 0x80, 0x100, 0x5, 0x800, 0x0, 0x1, 0x80000000, 0x400, 0x100, 0x3, 0xfffffc00, 0x9, 0xff, 0x1, 0x40, 0x7, 0x7, 0x7, 0x4, 0x6, 0x3ff, 0x7, 0xffffffff, 0x80000001, 0x8, 0x1f, 0x10000, 0x1f, 0x7, 0x8, 0x100, 0x8, 0x5, 0x800, 0x5, 0x1, 0x4, 0x9, 0xfff, 0xfffff000, 0x1, 0x7, 0x1ff, 0x0, 0x8, 0xe28, 0x10001, 0x29c7, 0xffff, 0xfff, 0x0, 0x4, 0x4, 0x178, 0x9, 0x4, 0x3, 0x0, 0x3, 0x2, 0x6, 0x2, 0x10001, 0x5, 0x4, 0x10001, 0xb03, 0xfff, 0xfffffffb, 0x9, 0x0, 0x8001, 0x0, 0x1f, 0xfff, 0x1000, 0x1, 0x20, 0x7ff, 0x438, 0x9, 0x20, 0x4, 0x400, 0xedfc, 0x4, 0x9, 0x40, 0x9, 0xfe, 0x6, 0x400, 0x9, 0x7, 0x5, 0x10000, 0x0, 0x0, 0x2, 0x6, 0x7ab9, 0x0, 0x2912, 0x0, 0x80000001, 0x0, 0xfff, 0x80000001, 0x5, 0x7f, 0x6, 0x1c, 0xbcf7, 0x1ff, 0x3, 0x7, 0xbd, 0x0, 0xfee5, 0x4, 0x5, 0xfffffff9, 0x3, 0x2, 0xc5ee, 0xc7db, 0x800, 0x9, 0xffffa712, 0x1, 0x101, 0x7360, 0x973, 0x78c, 0xc00000, 0x9, 0x8, 0xfff, 0x4, 0x9, 0x3, 0x6, 0xfffffffd, 0x101, 0xe1, 0x401, 0x626a, 0xa992, 0x9, 0x2, 0x8, 0x3, 0x8, 0x7c, 0x1000, 0x5, 0xf9, 0x1e, 0x9, 0x3, 0xfffffffb, 0x3, 0x1ff, 0x8, 0xfffffff8, 0x3, 0x80000001, 0x8, 0x4, 0xbcf7, 0x200, 0x1, 0x3ff, 0x3, 0x5, 0x77, 0x0, 0x7, 0x67c, 0x100, 0x7, 0x4f, 0x1, 0xcf, 0x2, 0x83, 0x3, 0x7f, 0x9b, 0x6, 0x81, 0x36240000, 0x1, 0xaa, 0x1, 0x10001, 0x400, 0x6, 0x6348, 0x81, 0x6, 0x5, 0x0, 0x3, 0x1ff, 0xfffffff7, 0x0, 0x9, 0x2, 0x4, 0x101, 0x7, 0x1, 0x5, 0xdb1d, 0x6, 0x5, 0x5, 0x8, 0x5a68, 0xfe5, 0x4, 0x9, 0xa3fc, 0x0, 0x9, 0x3f, 0x7, 0x4, 0x0, 0x3, 0x7f, 0xfff, 0xb498, 0x5, 0x8000, 0x800, 0x8, 0x8, 0x0, 0x3f, 0x4, 0x5, 0x7fffffff, 0x0, 0x10001, 0x3, 0xfffffffc, 0x5, 0x20, 0x5, 0x2, 0x9, 0x9, 0xffffffff, 0x7, 0x6, 0x9, 0xfffffffc, 0x3, 0x1, 0x81, 0x4bbb1fd3, 0x6, 0x5, 0x5, 0x1, 0x8, 0x3, 0xed, 0x100, 0xcdda, 0x6, 0x4, 0x9, 0x8, 0x101, 0x0, 0x5, 0x3, 0x5, 0x81, 0x5, 0x0, 0x2, 0x2066, 0x1, 0x27800, 0x2, 0x7, 0x10000, 0x7f, 0x5, 0x2, 0x8, 0xff, 0x7, 0x559, 0x7, 0x81, 0x8, 0x1, 0xea, 0x40, 0x10000000, 0x8, 0x6, 0x4, 0x7ff, 0x3ff, 0x3, 0x4, 0x6, 0x3, 0x6d3, 0x3ff, 0x2, 0x1000, 0xbe, 0x81, 0x1, 0x7, 0x80000000, 0x2000, 0x5, 0x9, 0x6, 0xf78, 0x0, 0x9, 0x3, 0x7fff, 0x20, 0x6, 0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0xffff8001, 0x3, 0xdbe0, 0x7, 0x80, 0x372e64e1, 0x20, 0x0, 0x1, 0x6, 0x9, 0x8a, 0xfffffffe, 0x8, 0xc978, 0x4, 0xffffffff, 0x8, 0xa7a7, 0x8001, 0x80000001, 0x101, 0xadf, 0x6, 0x2, 0x6, 0xffff, 0x40, 0x7, 0x20, 0x1ef, 0x0, 0x10001, 0x9, 0xa000000, 0x80000001, 0x6, 0x1, 0x5, 0x2, 0x8, 0x10000, 0x8, 0x6, 0x0, 0x80000000, 0x0, 0x0, 0x2, 0x6, 0x6e, 0x20, 0x2, 0x10001, 0x40, 0x6, 0x32e5, 0x2478, 0x88f, 0x9, 0x7f, 0x0, 0xfffffffa, 0x2, 0xffffffe1, 0x80000000, 0x1, 0x525, 0x81, 0x4, 0x400, 0xe5, 0x5, 0x52ff, 0x1, 0x89d3, 0x3, 0x1f, 0x40, 0x6, 0x8, 0x0, 0x4, 0x8, 0x2, 0x1, 0x1, 0x7, 0x1f, 0x80000000, 0x5, 0x20, 0xffff, 0x6, 0x8, 0x79, 0xdc, 0x20f95b55, 0x1be0, 0x5, 0x80, 0x401, 0x6, 0x8, 0x40, 0x8001, 0x4, 0x944, 0x4, 0x9, 0x40, 0x915, 0x8, 0x401, 0x40, 0xa8e, 0x100, 0x5, 0x1, 0x761b, 0x4, 0x101, 0x9, 0x400, 0x7, 0x86dd, 0x1a, 0x101, 0xb4d, 0x0, 0x9, 0x10001, 0x8, 0x1, 0x8, 0x20, 0x0, 0x20, 0x6, 0x10000, 0x0, 0x8, 0x2fa, 0x0, 0x4, 0x3f, 0x7ff, 0x3538000, 0x1000, 0x7f, 0x2, 0x80000001, 0x1527329a, 0x7fffffff, 0x10001, 0x0, 0x0, 0x800, 0x2b, 0x10001, 0x20, 0x8, 0x2, 0x5, 0x5c1, 0x14e, 0x2, 0x5, 0x4, 0x10000, 0x7, 0x1]}) setsockopt$inet6_int(r5, 0x29, 0xc8, 0x0, 0x0) r9 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000002480)={0x0, 0x7ff, 0x4, r9, 0x0, &(0x7f0000002440)={0x990a2e, 0xffff, [], @p_u8=&(0x7f0000002400)=0x4}}) 00:10:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x900, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/609, 0x261, 0x40010, 0x0, 0x0) 00:10:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1810a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0xffffffffffffffff}, 0x801, 0x806, 0x0, 0x0, 0x100, 0xfffffffe, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) close(r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x20, @ipv4={[], [], @multicast2}, 0x4}, @in6={0xa, 0x4e22, 0x80, @loopback, 0x6}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x3d44, @private1, 0xfff}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e23, 0x1f, @private0, 0x8000}, @in6={0xa, 0x4e24, 0xfffffff8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0x7, @remote, 0x1f}], 0xe8) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000000)={0x20002000}) r6 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x400, 0x1) ioctl$SCSI_IOCTL_START_UNIT(r6, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) dup(0xffffffffffffffff) 00:10:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0x8, 0x800000000000) [ 344.535609][T13386] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r4, 0x1) recvmsg(r4, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) close(r5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:10:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/609, 0x261, 0x40010, 0x0, 0x0) 00:10:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 344.658020][T13395] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x917, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x8, 0x6, 0x300, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:10:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/609, 0x261, 0x40010, 0x0, 0x0) 00:10:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x31}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000040)={0x5, 0x8000, 0x5, 0x74, 0x9}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x3) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, &(0x7f0000000000)={0x10001, 0x0, 0x7, 0x463}, 0x10) [ 344.904468][T13411] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/610, 0x262, 0x40010, 0x0, 0x0) [ 345.028632][T13425] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 345.113990][T13426] device vlan0 left promiscuous mode [ 345.407039][T13433] device vlan0 entered promiscuous mode [ 345.428812][ T8480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 00:10:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x918, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/610, 0x262, 0x40010, 0x0, 0x0) 00:10:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) r3 = socket$inet(0x2, 0x2, 0x4) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, [], [{0x8001, 0x800, 0xfffffffffffff001, 0x8da, 0x8, 0x2}, {0x5, 0x1, 0xa1, 0x1, 0x2, 0x4}], [[]]}) dup(0xffffffffffffffff) [ 345.597948][T13442] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/610, 0x262, 0x40010, 0x0, 0x0) [ 345.805429][T13450] device vlan0 left promiscuous mode 00:10:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$AUDIT_USER(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="78000000ed03100025bd7000fddbdf25c960a0bd56edf676629656a73d454a476f785ac9f211eef0fd786d5c05e239b24aaf451ea463559532a74d70a68048dea222db597862410918618280c097963d0b7b7af4319b6ef3b96b79fd2470969ca6ed96ce44a3f8c346e2444244f323916825c7df74eeced110057c585e42dcde5e6d18125cea973bbca10fe175de2eeabbbbab00542c2518147ce186c45df0d43dd910efcf"], 0x78}}, 0x20044001) r4 = socket$inet6(0xa, 0x6, 0x0) close(r4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) [ 346.172890][T13454] device vlan0 entered promiscuous mode [ 346.199736][T13470] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0x263, 0x0, 0x0, 0x0) 00:10:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 346.423707][T13479] device vlan0 left promiscuous mode 00:10:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0x263, 0x0, 0x0, 0x0) 00:10:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000002c0)) syz_open_procfs(r3, &(0x7f0000000000)='net/bnep\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) [ 346.775970][T13481] device vlan0 entered promiscuous mode [ 346.878072][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 00:10:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa00, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0x263, 0x0, 0x0, 0x0) [ 346.995732][T13492] device vlan0 left promiscuous mode [ 347.309358][T13496] device vlan0 entered promiscuous mode 00:10:14 executing program 4: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x5, 0x800) r0 = syz_open_dev$hidraw(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(0x0, 0xffffffffffffff7c, 0x2202) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xfd0, &(0x7f0000001240)=ANY=[@ANYBLOB="1a00004eca084561a7d76e0a9633153df6ea78457f564006e6a554fb59c30000d600004e9d706a21c1428c10c8a58021d1c0f8fd3b679169034a4165f362a7ec7d7484a455f5e438a0887ccb050fd9a99844b9dbd21a315e9cdd540b55ab1711e08389f5f5b4cf9f9e9042f229f678279d677ccc1501c051e00a69222a2edf87b7fc3ee12a0629ecd748ae8174ab3aef0e7ae7e0094385270860a07ba05b4ecefa8d65aee46afd53e29d8b756c0231e044daca2ff45a084b48a7934e4c052dc05d8dc64dfb16033bc29fa58436acb41b4a56f587b7261ff7552c68de07f89a753b9c025fcc30d68d793a2f7c293081711eca50e0cd872d01282d574c57f77ef223a10000c900004ea8e7f86a9835bdf54e8bbe872abf661fd80c1e832eb89123fe8ec6f9ead7c937ccc185ab4a89306d6ecd888b5eea1ca57169f5dec7fcbfbd7fa75bacde0a540b3f1334157598322bef5644183392feeddeed8d70fa71c78bebdcfc4b48d7118b8a9fce362d3a5a3d62d119d44b64f3c570ccb454e6f88275f1c7260da725d7411d7c25c7e5f8b81674aaa159c2f1231fa68068fbd255cec5a43e998d6ac80ce74694f7a3741f5345250427506161950eca351794c18a3eac678d4d1f400a9e08204688cbeba0d79b35e0a56d395e000000000e004ea64b8220b2334db092e48d230000000039385141a97c28198ca119caf0efad16b3b7b509c716f2d26a9e6aee9fd91a86ab1febb84f000ceadb9b00049ee81a25faa224852e0a99e1d8f7132840c6483cfc05b1cbcf083cbf04fb1918aa8f52efb6805964f1d99a84ad97d470a4eba35093990974a4e695e6901a297657137d31daebaee9e823856f80aec1685fe4851d1ea0b5258659fb75a3babe8e9294303ea423b6e2a7bea0dcc420a680da93a3d8ff7aa0604c88fb350f3b9fc37e12469884aa8ded6d661a89d66ca7ddc1545a2769e7e65b5d79414b3a29e3ef834e01ac70c370c9bea57eef237a107cfc79737592532a0d49912add3caa7f7616b8313b709c129dcdabf2b8a59e02cf9b19e54536e52dac27db1f24f8416602ce6a5e338220185b852ea4307a2d1db9253ebea7a419669974c469d46ff614d7f0d0b95e60764edf13574c55926eea4c09cba877b3c1f01f9c32455c807e7b49d5f4e29393f28d68f1ef0091eb6dda201144058d8cb9df2594c76713bfdc14fda0265cc21be479d7fcd2e7be13e867806dd606a1d21d8c7891d01cef08b66cb7b7eaa30c47de06d4fe93777fa35c4be18c215a2a287cedeeaf68444b274e5113efa71c2e37e99745d2b67edafc0cfa5c42256ef2778efe982d809a2fff6f9fd3cc1798725bfce6d43a4a07b246abf06fda5f4b4cf548d4fc545d74b41c5dd54ddece9248c0f747ef7e15451ca562b8269beefa4fb89564f79585c2666246f8c4c0bf398bc69fe00001f6a1c46392cfd0cbda52a5c879c48c7bd973ca35a17d7e1bba4d89dcbcad2824b271d161bd1654e18ed9daa5e8413980eaf2813537dc24aa97054fc335e2a252e9e2d8410ea2abb8fafc1bcbe53436e519098c330538ca10be5bb84541c2a63b879ad2b22acab3d6baac08e1069cc8d809bcc35a13ec056888fb0143f6a3bb822bb1f5e71bdfac7d00279f12f8a9d6dd3a527c7abc74f571de1110aa81e0dec749edf2e3fbbef5ff93f7afc8405e3b2b689c0ef525835270c05748dd2578e7bcb3f01bdec1d8ffb75234b71211226d2d36c0ab6c043983030a9eef70ac2b7cbbf43a39d5c3deafe081a791c2615794787a4a555744263639e2867ef94583d25daf0f99d30a23b9181be7a273adfb3e794342dbed4781521fcc87c36839438232f9c89744451d7af88f30e0dd06c9f6ba4e90ae7be0342d0c13ca4977b7860fe572a298203706773d8fdd3c34f1e2097e720ddb1aa7117015172e7e3ce440b9648a4a84b950bf5d09cf66ffd2abda366ba55b0ac8c601bb8490190d7e2fe6af20245e4e314560f6d011ffafc2341640edc88832736265b4a15f93ba929f619bc6decc3eea54dd8539766c9dc989a774a62f5daccff7f85e1c5b55129442175a0e1326b0f75ca6f028776129666a9e0ab7d9a3f9d14a7890ea5a5e7c9519e62001a5b56307b7e6c6a55d34c66b5d9bdae50040618726d6cd56fcb0de7b59a6294af754476152a1685ca7d5fe0cf8deb152f8df0e0872ddf0d1b08e439f5981358881f68887deb65bb26a197d0b3d3597e0a7ade5f41992fc498ad8f1d724f6470cff6a35103307d01b076283dfdcaf1b94a7d805de19fbc737771ba4dc15f1e4ff2036716ee978dd4b67bcf6f70071bb92d854802537cedb18565842bb7fd4ffe9dd76bdc7df1be34a5d6abef5c069679a12a693860d690a8ed660c3e4a4d76829d0a1c940160d05af9d7b5f9fc6d646b5d06aff43221eee44952fb1df8c30e3fc40010fd699abcf19c8633619300bef64cad681c4e4610f782478a51f0a26213668ce8a15b0f7f59011fa70753ff0c35a53212f207bad57a5b66ede484b3c6323d2f2235d451cd5604eac791ed995d291e7064a6de4a41228b3f0b32385df9b644313bdcfe17195420567a054c1c7af6b482c628dc161b966505a8a2937b9f08c1ae082a8d3c9737ef01c9b522fb86fc15654c279376940b2a2855cc962ae0dcba340ab1002d214e21e198f51d7536b2741fc23b8ef3b98aad32a25303a83a3b45b6f99c543b2c76a4836354985768e4d798bf19efb0c28f614a7e2757bcf4ed93caac6ca8c85a79a6c1395b4c7ae55da37acbc715286a335de1bb743e028bdaa94015dbac39c88584ac9d6d855305f32d5e26600e02b13c21908c624da322078d33bd9354a14e9be9a42ec7a65995524cb8d10d6dbb7a126920b84fe01e6ce11543868efc0e292817fc11a55a43831b56140bb3534a3e6b898fda613d5cd898adc571ec28f9774073ce50847715cf0a081fdba3ae1c85421ac331a738707179b17c6e8c4119ff1cc7b68a97fa020702fce98f5f9580366169eb6141b9fc6e888a09254a7140105abb2491eeef2a3c57061b9e8d30ddbec1dca83026f4bed03c450366265d2634a624164b35840fb5242390e5a40cc838db8af9b25a6cc272f589786be249764f6b14289dfc654bc1eb610efaaa5abae7511a81aa5e92fd28af2d413b7b49b1213257f7a5b1edd977e15ec508131b980e865f5ad79fe1612a9f1bb9f8ecaf1cba3cf677b3eb9559f162f2e6908813bb8e0b09e74e58b87db58fa981536d0836b53e61d90870c26d52da3ec457bfdc333c499d2bd239390565bc624bd0195ec7a71c625986ebd3a5ce107224ef1022ffc6144e3c5ff43915196ff3d016deb11f73dabfe3c1c7550cdafc7ca2dbd857a5f1224273572e3efd8adc555016e1ca8ec718acceaeb6d600b9bb82dc879d93bc417344378441968812a908434a92d11b67ab0827924188057456428b23e5d4e796d1c565f7d2be5ea377ccbbeeb6ede8b3d13af8ed9e27b29d28ee77ecab4b561e96c316308375d538bb2db37db384561c6fe10d3f071356109e181d9a5b517044d3b58506e83be45be0de548e0b54b36d5f8bf072704f0b40eb519b2b435ac6747721e40b7e880202c9bd7c9d61c17f0808f0679ab9147f82edf1dcef35288c74bd421ee8fdb3075d7accbaaf010ff20ed88365b156d5d672eb0f684efd678527b52f1385a88c50180bc3943c7c53d0832ac58cd839a867eccfc989325397821cd1962a063ae81d5cbb1ad983e12bde34ed207bab6f1a40a2e51fe87b6cf5d6322a62eb2a3836a061f7185b65256305986a7cbb88081ff70c99bec75d52b2bccf05c78d79ad14b9acacd6b404d5523363e7fbc472bf9938e69d89c3beeb907d384961716a478998f447255cf076a470a08fd6d370eba807b417e56a1a73df12e35d4d9fcf0bbf537d055cf859df5ec7a6a209fa3b2b0e8719dfe08378b19c3a676a27b4dbfd6a0155adadd490a4cbc6b8cdfd614f2fa7260e68058f57fe60bc2952b3d7b8a54abede25db1a8c0c865407be7e634130f558c93b54449bfdc608051a635af5a2b800659ea50854ee1a21b21e2cd2ff2b027db31af2642c5037e1db9d1203d580b76de786511cf64a9a4cc07eba9e9ac8983ae78b8f629960245827c21902a4d4748ffd1530fff1ca24acf2a473f9c6fdee04c0e42bf77b88253929e696dcbfb11d39570079d5960e7226977ee99944deb9efb6195fa29c5c7b4355b66b42e2a1bd24154bfd90a5896a6795d5080028305833448723bcea9422eb251773caa0bc5b300ceb9f46cdeb74dfe1471123a9bf9070de2ec6f5a97c17f1cce979a20ee69bdf4a669a500b9253055303aff73a44159a7fec0ada5d7be42df4b4f4dfe13c2b7342dc548d2c0a6fe2eedbfb6b5ce6337575dd8cdb37bd43855b8d254139a79"]) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1e4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000080)={0x41, 0x8a08, 0x5, 0xffffffff, 0x2, 0x1f}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x1, 0x4, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x60ff) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x42601) write$hidraw(r3, &(0x7f0000001200)='\x00', 0xffffff45) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000001540)={0x1}) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f00000000c0)=0x2) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000100)) 00:10:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 347.653977][T13516] device vlan0 left promiscuous mode [ 347.808041][ T7407] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 347.880064][T13517] device vlan0 entered promiscuous mode 00:10:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc00, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 348.137964][T13523] device vlan0 left promiscuous mode [ 348.348839][ T7407] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 348.365938][ T7407] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.393176][ T7407] usb 5-1: Product: syz [ 348.412810][ T7407] usb 5-1: Manufacturer: syz [ 348.424453][ T7407] usb 5-1: SerialNumber: syz [ 348.449380][T13526] device vlan0 entered promiscuous mode 00:10:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xe00, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 348.694940][T13545] validate_nla: 4 callbacks suppressed [ 348.694949][T13545] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000280)={&(0x7f0000000000)="544726cb0c0f292ec291ed16ed4cfe80d0e05d345e406ec4e7244557d3ed92938cc2cd96c1873570d8f57274170c1c22f9214355a5144f53f1e9c220d913535d9e6b4644320bf47dc670b3748ba3636f85014bc5bc99e3dcd4b040375699aacea112e302c8e3511cb8e3e25a211b0bdf6db4e59f901b3c38db0b0695061a99a5397f8e60f7e4c6cc10cb7714d6fea88055133c299c72ea7b0ae0e379fb5a5fcec458db412d500edf3d23f055a00b7a92f0c4c6b9d172fb5a0ff433d840495e168a829f", &(0x7f0000000180)=""/189, &(0x7f0000000100)="6062eb44f03a0e43872f5a5187a3274be077e31def1784d1d631446390ef6086b5", &(0x7f0000000240)="fa284f7f559ded70281a9d64af3e5e0eff31cd3a60c546068063f912cfb4fda44cb2", 0x1f, r2}, 0x38) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) close(r5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) [ 348.838752][T13554] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:10:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1200, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 349.131265][T13570] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 349.260368][T13578] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:17 executing program 4: 00:10:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) prctl$PR_GET_SECUREBITS(0x1b) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x15}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:10:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1709, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000300)={r5}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000540)={r5}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000300)={r5, 0x2, &(0x7f00000001c0)=[0x8, 0x5], &(0x7f0000000200)=[0xf0, 0x81], 0x41, 0x8, 0x6, &(0x7f0000000240)=[0xfffffff9, 0x401, 0x4, 0x7, 0x1000, 0x5, 0x2, 0xfff], &(0x7f00000002c0)=[0x6, 0x7, 0x1, 0x1, 0x0]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="0100", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7d, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000040)={r6, @in={{0x2, 0x4e20, @loopback}}, [0x5, 0x10001, 0xfffffffffffffffe, 0x1, 0x2, 0x9, 0x0, 0x9, 0x9, 0xd23, 0x2, 0x7fffffff, 0x80000000, 0xfffffffffffffff9, 0x8]}, &(0x7f0000000140)=0x100) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0xc8, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0x7, 0xff, 0x5, 0x7}, {0x7, 0x8c, 0x7f, 0x8}, {0x3, 0x0, 0xf8, 0x7}, {0x1, 0x57, 0x61, 0x40}]}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x6}, 0x4) 00:10:17 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2321a02eda930809c0ead6219e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x4, 0x10002b) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x20000) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000140)=""/59) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES16=r2, @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x2411}, 0x448f5) [ 350.494946][ T8480] usb 5-1: USB disconnect, device number 2 00:10:17 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x81) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 350.571612][T13599] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:17 executing program 4: 00:10:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) [ 350.672842][T13610] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:17 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000f85006000000000000007b8b8520c9ff0f0000"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:10:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') close(0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000000)={r8}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r8, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r9, 0x4}, &(0x7f0000000280)=0x8) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, r6, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/70) 00:10:17 executing program 4: 00:10:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1809, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:17 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x4240a2a0) socket$kcm(0x29, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) close(r5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:10:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:17 executing program 4: 00:10:17 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80600, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000080), &(0x7f0000000100)=0x4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_CAPS(r4, 0x80044dfc, &(0x7f0000000000)) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 350.985564][T13637] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 351.051132][T13644] device vlan0 left promiscuous mode 00:10:17 executing program 4: 00:10:17 executing program 4: 00:10:17 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) gettid() 00:10:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000020c3067d310002000009040000000000002cf6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a0000007218091d63005c317ee8363ee3"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:10:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 351.379902][T13668] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xa, 0x0, 0x0) 00:10:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) close(r6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:10:18 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="23210004da930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:10:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c01, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000020c3067d310002000009040000000000002cf6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a0000007218091d63005c317ee8363ee3"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:10:18 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="9e00"/11], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x164, 0x15, 0x200, 0x70bd26, 0x25dfdbfc, {0x8, 0xff}, [@INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "a99017fd0275ee2b573591261da18471e3adbee1b3775e5192ce571efba613a48a4054f3adee5379459caa1d649993e479fe7e5c8e97541c8702b05e5dafdde55ce585eec38870b88ddfceb21aa8fb7e5fb26a3e949bd9a013d273cf6e8afafe698a6175b79723195199bab41b8d9ef1d8fdf7347d28407eb29ce6a129728f0650dbe75caa6f833f4c10ea8e307fa53861f4e5d1c84d6618871aabe41bb38e800e77492d8b138861047da1e3e1c66dbe9225f4b41795cb93deff57176f34a20eae7b47a7163ddf412e2c02b52982c9079cc94825a0ab50"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "5deda4d9c4fcfa619ec604c025ba852fe52c197ceadaa50ca97caa2e23e74c9549a4c468fe9253da0b913229954d09e7a56713688edea8c12b06e08831b1290460d6d4b6a914452f95fc0dd200e4d768daa645caae01db641e681916ca9be0f2e1fb3a1f8453884265599e9670c2"}]}, 0x164}, 0x1, 0x0, 0x0, 0x4004000}, 0x44044) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 351.869116][T13699] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:18 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x7) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x640100, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @mcast2, 0xfd4e}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 00:10:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 352.026441][T13723] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:18 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3, 0x80) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000080)={0x2}) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x40c00, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:10:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:10:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1e00, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 00:10:18 executing program 1: gettid() r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) getpgrp(r1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000002c0)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000002c0)) prctl$PR_SET_PTRACER(0x59616d61, r4) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x23) ioctl$KVM_DEASSIGN_DEV_IRQ(r5, 0x4040ae75, &(0x7f0000000040)={0x5, 0x0, 0x7fff, 0x500}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4200, 0x0, 0x0, 0x0) 00:10:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) write$cgroup_int(r1, &(0x7f0000000000), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000040200000077000000421ba3a20400ff7e280000001100ffffba16a004000000000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x6, 0x0) close(r7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:10:19 executing program 0: r0 = socket$inet6(0xa, 0x800, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:10:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000020c3067d310002000009040000000000002cf6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a0000007218091d63005c317ee8363ee3"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:10:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 352.483157][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:10:19 executing program 0: getrusage(0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) fcntl$dupfd(r1, 0x406, r2) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:10:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000020c3067d310002000009040000000000002cf6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a0000007218091d63005c317ee8363ee3"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 352.771416][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:10:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2000, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) 00:10:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:10:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000140)={{0x1, 0x0, @identifier="86d6408a15e1ae2e8b3c375cee88b5a9"}}) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="05000f0000000200af277ab3808fa189653af959488740c0ee7775b64962b5c9e44ae36f4db298c3ebcc710f9c435287ae636e705b8757543eb2897904a04f21bf0449aa29315ee22a2292069523a86a8d4f7503d3f5057f9b07ecb184cf4e0354bb5ad921f21fa96371350d8644439333ff58bd750071d6a55446d4c2e75073a4efebdca0149da95384edd3b6471dde98d9861ce93c5c85c8f0856f6c4dd84a8cfe1a804800000000"], 0xb8, 0x2) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xc8, 0x0, 0x0) 00:10:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) 00:10:19 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x7, 0x2, 0x0, 0x800, 0x8, 0x8, 0x8b3a, 0x3}, &(0x7f0000000040)={0x8508, 0xad, 0x2, 0x3f, 0xff, 0x100, 0x90}, &(0x7f0000000080)={0x194b, 0x4, 0x4, 0x400, 0xf92, 0x0, 0xd81, 0xffff}, &(0x7f0000000140)={r2, r3/1000+60000}) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:10:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2200, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000020c3067d310002000009040000000000002cf6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a0000007218091d63005c317ee8363ee3"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:10:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r4, &(0x7f0000000040)={@val={0x0, 0x1b}, @val={0x2, 0x4, 0x7a, 0x9, 0x7f, 0x4}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xb, @multicast, @multicast1, @remote, @remote}}, 0x2a) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@dev, @in6=@local}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xfffffffffffffd8a) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:10:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @remote}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) 00:10:20 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:10:20 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000400)="428b42a7ae2fd3339d53b580dcd41ca722e4d51c6c51761a064335e950f21a8d1bfe21407743f374ee42e5d4879de067ba37be03ba93e0115add300571b61bf157406a1bcdb046311f9399234169706b3ae659c3e0d781da7d276921ce5f0da41067b669af82e350d48a42b886de319e94a1a86b599461553404751a648eddd2225c4db22df6e6") execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=r5, @ANYBLOB="00000000018014000300fe8000000000000000000000000000bb08000500030000000c000700300000002100000008000800030000000c00070008000000120000000800050000000000080004000227000060000380080003000100000006000400008000000800030004000000050003000000000008000500ac141439140002006d61637365633000000000000000000008000500ac1414aa0600040068000000060007004e200000380003801400020076657468305f746f5f626f6e6400000008000100020000000600840d00000000000008000500000005000800f8000000080006000900"/246], 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = dup(r2) write$P9_RSETATTR(r4, &(0x7f0000000240)={0x7, 0x1b, 0x1}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getpeername$ax25(r6, &(0x7f0000000000)={{0x3, @netrom}, [@remote, @bcast, @netrom, @rose, @bcast, @netrom, @netrom, @bcast]}, &(0x7f0000000080)=0x48) 00:10:20 executing program 5: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000400)=""/119) 00:10:20 executing program 4: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x800010, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x5) lseek(r1, 0x7ff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000ffffff10) 00:10:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2501, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 353.750475][T13866] FAT-fs (loop4): bogus number of FAT sectors [ 353.778961][T13866] FAT-fs (loop4): Can't find a valid FAT filesystem [ 353.790922][T13872] validate_nla: 6 callbacks suppressed [ 353.790931][T13872] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 353.850410][ T29] audit: type=1804 audit(1593389420.475:13): pid=13873 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir078463716/syzkaller.lVxrZ6/186/file0/bus" dev="sda1" ino=15972 res=1 00:10:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000000)={0x4, {{0x2, 0x4e22, @remote}}, 0x1, 0x1, [{{0x2, 0x4e20, @multicast1}}]}, 0x110) setsockopt$inet6_int(r0, 0x29, 0x17, 0x0, 0x0) 00:10:20 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x15e) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="3cea00ce3d978b000000000000e2000000"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 354.013015][T13872] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000040)={0xfffffff9, 0x9, 0x4, 0x70000, 0x5, {r3, r4/1000+10000}, {0x2, 0x0, 0x2, 0x2, 0x7, 0x2, "90511516"}, 0x401, 0x1, @offset=0x400, 0xffffffff, 0x0, r6}) fgetxattr(r7, &(0x7f00000000c0)=@random={'system.', '[]\x00'}, &(0x7f0000000100)=""/102, 0x66) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:10:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 00:10:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2503, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:20 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000002c0)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000002c0)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f00000002c0)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f00000002c0)) getpid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:10:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x7d, &(0x7f0000000000)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000000)={r5, 0x3d, "27186c84b86898c4bd97892a4938f608df2a2861cbb1e14c35a9ee15a19333fee6e7bd161e3e1724b2aed5bf7d94185205fab2d1130cf2d99fc779eff2"}, &(0x7f0000000080)=0x45) [ 354.320940][T13905] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:21 executing program 5: r0 = add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)="87", 0x1, r0) keyctl$read(0xb, r0, &(0x7f00000000c0)=""/200, 0xc8) [ 354.467678][T13914] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 354.531371][T13866] FAT-fs (loop4): bogus number of FAT sectors [ 354.565081][T13866] FAT-fs (loop4): Can't find a valid FAT filesystem 00:10:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2e01, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 354.636868][ T29] audit: type=1804 audit(1593389421.255:14): pid=13924 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir078463716/syzkaller.lVxrZ6/186/file0/file0/bus" dev="sda1" ino=16371 res=1 00:10:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="49067bf889fe969a"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:10:21 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="2355d33ae5f8f5b61ab1becd5cbf2021202eda930809c0ea43e6a51770ebc87e40b9cf72ef4ac79e"], 0x194) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000200)=0x1) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f00000003c0)={@in6={0xa, 0x4e21, 0x80000, @private1, 0x101}, {&(0x7f00000002c0)=""/203, 0xcb}, &(0x7f00000000c0), 0x17}, 0xa0) 00:10:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="cf", 0xfffff}], 0x1, 0x0, 0x0, 0xa6ff0034}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001880)="f3", 0x20001881}], 0x1}}], 0x2, 0x604d800) [ 354.764508][T13933] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 354.869618][T13942] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3a01, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:21 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) ptrace$setsig(0x4203, r2, 0x8001, &(0x7f00000002c0)={0x11, 0x10001, 0x8}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, r4, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 355.552932][T13987] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000020c3067d310002000009040000000000002cf6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a0000007218091d63005c317ee8363ee3"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:10:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000001c40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') preadv(r0, &(0x7f00000017c0), 0x184, 0x0) [ 355.700185][T13999] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x810000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000080)='./file0\x00', 0x4dc5, 0x0) write$9p(r3, &(0x7f0000000140)=';', 0x1) [ 356.152201][T14023] FAT-fs (loop4): bogus number of FAT sectors 00:10:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000020c3067d310002000009040000000000002cf6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a0000007218091d63005c317ee8363ee3"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:10:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4088, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:22 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x6, 0x0, 0xc}) fcntl$setstatus(r3, 0x4, 0x44000) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 356.215423][T14023] FAT-fs (loop4): Can't find a valid FAT filesystem [ 356.322454][T14033] FAT-fs (loop4): bogus number of FAT sectors [ 356.354473][T14033] FAT-fs (loop4): Can't find a valid FAT filesystem 00:10:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0xfffffffffffffff9, 0x0, 0x0, 0x4cb, 0x7, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x800000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 356.601625][T14061] kvm [14058]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000029 [ 356.634348][T14061] kvm [14058]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000015 00:10:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4800, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 356.657050][T14061] kvm [14058]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000006d 00:10:23 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0xfffbc) 00:10:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000020c3067d310002000009040000000000002cf6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a0000007218"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:10:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4a00, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000400)=ANY=[@ANYBLOB="070f29fc"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8800) 00:10:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000020c3067d310002000009040000000000002cf6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a0000007218"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:10:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x2}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 00:10:23 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x1f}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fstat(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0xe8) mount$9p_virtio(&(0x7f0000000100)='syz\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2010012, &(0x7f00000003c0)={'trans=virtio,', {[{@cache_fscache='cache=fscache'}, {@posixacl='posixacl'}, {@afid={'afid', 0x3d, 0xfffffffffffffff8}}], [{@fowner_gt={'fowner>', r5}}, {@pcr={'pcr', 0x3d, 0x39}}, {@dont_measure='dont_measure'}, {@euid_lt={'euid<', r7}}]}}) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000000)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000000002000700000000000010", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=r7, @ANYBLOB="02000700", @ANYRES32=r5, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="040003000000000008000700", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="10000300000000002000000000000000ce2945c239441c37edf2809e1f"], 0x5c, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:10:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4c00, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 357.474829][T14136] 9pnet_virtio: no channels available for device syz 00:10:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000210010002000270fff8", 0x16}], 0x0, 0x0) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/36) [ 357.541560][T14145] 9pnet_virtio: no channels available for device syz 00:10:24 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x2d) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:10:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000020c3067d310002000009040000000000002cf6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a0000007218"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:10:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4c01, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 357.623898][T14153] FAT-fs (loop5): bogus number of FAT sectors [ 357.643501][T14153] FAT-fs (loop5): Can't find a valid FAT filesystem [ 357.735551][T14153] FAT-fs (loop5): bogus number of FAT sectors [ 357.750916][T14153] FAT-fs (loop5): Can't find a valid FAT filesystem 00:10:24 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0xc4100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:10:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x541d, 0x0) 00:10:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 00:10:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5402, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:24 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e06930809c0ea9e269f133d7baafa0270656929e221d406f025192f8f83b9d6e485f0fa0e887d53735f2bfb548189ec11d9e8d2383323e80eae3d62eaf129237bffb91757ca7c3aad31b972405b107953ce69e89fe011d3968743bd6c6b96b0"], 0x194) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) ptrace$setregs(0xd, r2, 0x9, &(0x7f0000000080)="21efb37195b0829001fd3e2655c5324f721ae87965f7b478783327a043bd7ef644da99e69d8ff4d23551d28763b5861bc28d886149a80493a4f73f62a5165fb2103ee49ab87e5a13d8eca3b24cec14c9228f08ffb022457b53bcac2f97799a7547558c11adc77e659279627f8c05c0ec") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:10:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 00:10:24 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0xfffbc) 00:10:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5865, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:24 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5413, 0x0) 00:10:25 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000100)=ANY=[]) 00:10:25 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f8000003000000300300009802000000e2ffffff00000000000000080000009802000098020000a10200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000c10000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002100000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000fcffffffffffffff00000000000000000000000003000000070000200000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400700098000000000000000000000000000000ecff000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200407fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 00:10:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5b03, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 358.649614][ T29] audit: type=1804 audit(1593389425.276:15): pid=14239 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir723378102/syzkaller.V3b4fC/178/file0/bus" dev="sda1" ino=16376 res=1 00:10:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000020c3067d310002000009040000000000002cf6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a0000007218091d63005c317ee8363ee3"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) creat(0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 358.763663][ T29] audit: type=1804 audit(1593389425.336:16): pid=14239 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir723378102/syzkaller.V3b4fC/178/file0/file0/bus" dev="sda1" ino=16378 res=1 [ 358.803760][T14246] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 358.850708][T14251] validate_nla: 17 callbacks suppressed [ 358.850716][T14251] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6000, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 359.208530][T14265] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 359.347525][T14273] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x154, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x128, 0x2, [@TCA_RED_FLAGS={0xc}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14}]}}]}, 0x154}}, 0x0) 00:10:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6558, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 359.665344][T14286] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 359.787861][T14293] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:29 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x119) prctl$PR_SET_PTRACER(0x59616d61, r0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) msgget(0x0, 0x284) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x401, 0x3}) 00:10:29 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5437, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x20801, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000000005) ioctl$KDSETLED(r2, 0x4b32, 0x5) 00:10:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6800, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x2, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 362.982668][T14311] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:29 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x194) close(r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) wait4(r2, &(0x7f0000000100), 0x2, &(0x7f00000001c0)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000040)={0x2, 0x101, 0x2, {0xfffffffc, 0x50, 0x1, 0x4}}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000140)=0x8) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:10:29 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./bus\x00', 0x0) 00:10:29 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5437, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x20801, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000000005) ioctl$KDSETLED(r2, 0x4b32, 0x5) [ 363.148208][T14327] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6c00, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:30 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202eda930809c0eae7db99263bc9c42ce7"], 0x194) close(r1) clone(0x108400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:10:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x4, 0xffffffff}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff"], 0x3}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) 00:10:30 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5437, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x20801, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000000005) ioctl$KDSETLED(r2, 0x4b32, 0x5) [ 363.466443][T14347] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:30 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5437, 0x0) [ 363.623897][T14364] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 363.662384][T14364] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 363.721309][T14364] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 363.773692][T14365] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:30 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5437, 0x0) 00:10:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7400, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:30 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000000)=""/171, &(0x7f0000000140)=0xab) [ 364.035819][T14382] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:30 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYRES64], 0x194) close(r1) pipe2$9p(&(0x7f0000000240), 0x80000) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x250100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_dccp_int(r2, 0x21, 0x3, &(0x7f00000003c0)=0x2, 0x4) dup(r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x0, @xdp={0x2c, 0x4, 0x0, 0x3}, @hci={0x1f, 0x3, 0x2}, @xdp={0x2c, 0x1, r4, 0x1a}, 0x29, 0x0, 0x0, 0x0, 0x43, &(0x7f0000000300)='veth1_to_batadv\x00', 0x1f, 0x8, 0x50}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r5) lsetxattr$security_capability(&(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [{0x47, 0x6}, {0x200, 0x3}], r5}, 0x18, 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 364.151153][T14391] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) sendfile(r4, r2, 0x0, 0x800000bb) 00:10:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7800, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:31 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000002f000/0x3000)=nil) [ 364.416254][T14405] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:31 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000040)='./file0\x00', 0x5e) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x840, 0x140, 0x4}, 0x18) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x8800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3, r1, r1, r1, r1, r4, r6, r7], 0x8) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:10:31 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000140)="01434430303101024c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000200000000000004f0200000000024f006effffff00000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f0000000280)="e5a5c14d7a964273446754cde612e2abbe48aa379f5c03", 0x17, 0x3}], 0x0, 0x0) 00:10:31 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, r0, 0x0, 0xa, &(0x7f00000000c0)='\'!\'.}/}-\x03\x00'}, 0x30) [ 364.579320][T14420] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7a00, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:31 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202eda930809c0ea9e4a90a940f0e7cae43fd5b7b763da524838a642ae61adc6e487d33ec5a4207ac35d020cf04addad7fb451f8", @ANYRESOCT=r0, @ANYRESDEC=r0], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 364.823130][T14434] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:31 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 00:10:31 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 364.939235][T14445] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 365.012565][ T29] audit: type=1800 audit(1593389431.636:17): pid=14451 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16372 res=0 00:10:31 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000001680)="5dbb138b61c9c3d0aff3f8d5de0eb0585be1132f47222915eeb1b15cfa2a51871ea0dc532385fe95456f78ef8aaa75355899372b5df69b718a55d83a8c7697d6771960f6568bef8e420e9a463178be3f050369c54ca7a83c1773423a7d977fe9a75104274b8aab2150c5fcd9a7446008d287a5b1b30f4229a508afa34da086103cb67f3211590674df49280cc69ae475e92bc7e6ccc22dc022118b014b5551cdfa05aa30237f4872ba4c2518bf39d685320557ffdab02fdc973b6547b824c2c0bf8fd0c696883b9a1f7bf9ae28f4f306dffb60bbc494e8620084241d93872f130a6207535eb7eccaa393446a253ea9a6612811cf9e9d0ce65939efcc8ba520f4c9e5221b49a96250df802f0a1aeb6747bcfeed26c69cb47ef1376d12b74d296ba33389e0b1fdd3067e6ae6c1e27904e51e080ed183319a71a68c982b9e9dda1ddad6dc66a3885630e4f242b5318a0136d5c13e937db9095716b73445f64de3bbc369b9c695f89a64ba4286a6a635e7dccae9f58b4a0edfc2690982128d8b501c7391d8dd78c561e9465eba5caaa981b07e5cb91dea75201dd3ca81849cd43aa4b9473c7adae6d68e4475ee564cb663466f522b8c691be94046224ba960dbcdc6b7ed8e9f43385ac119af15497ebd0f397ba8a236e0f699a3f2238465e85aa28d695d089e6d41aeadbe2ee260e8b450f0242ee318b496cbb1538d0c39420093d413aec8c168eee26e09e66f5ecc903f0f3880a54995a0817ff5c8e8b6f6f4ed508600eef6a8b1a7f1f4747e70b5ae7b3fbe43ecbe456792fbfc7b5563ac50a83566f4c73c6263090dec802f0704d8287fac9217e1732372b54e46ebafc3e71f5ff1e84da05c4089b84a0f8d1354a7a53e9cd79900e8bf0d88156b9e81d1f8bc057ca73c181149a42532e1f80dbc02c1a8b6abbc36d31437eb3e1e9946d2427ff8c9df5310a9d904622c6e11b3fc5b143fa8230d88218323ee0186b06cedcb9f0a98747a7616153d3a0543fcf3eec0e49f4e5c9e41af866200cac85362e905cd4ceffbdab490e66b78ec1b304b00cccf8cb93144d5609b01d0be49302db639824af5cf5f0798fd0986fd79a5cb721885c6da6aada37298ca79a96f2d27828e50fe9f09473cd1d13aa0faef7710aae9fbcc4be7bbb38b9013a876189111f8e5c285a1c6974b763132358f41e67ba255f6095d78c365d96f4a6347dc4dbbad25ccf164cfad618ad57451367e50069a2b2edc5ddf0f143d11bf7bf0b72244617e12497225b74afebcc58cf2fc2d81fbd5ddda0e8a78bf4aabba4ab2ca0c97ab96209b7f92115fbf2a441bdd81d4cad0d37854ba0872d0c9b2301b1a61b40701df16d7a961e9a281bbe8dd30882c56a1d5a76af48dffc585f6d8a6448855897e3fdd5731263a1607106fa85f8425fd0c6bb54ca9a919c529b0043e436e9fcd1f3a7189d3f5ab1fbb37294546aca07ce41980f29d215bc922813d50a9492306a740df3cb3690af1dccd59e329bfb8ace592c7cca7423f27326a742dc47f555f6b4d77642a548529f4393ed1d758797ac648d5e6b485df4ce241e386c39b7a287b352a0ab8253a2c53bcdd544ab63a194bec3404710a1843010c546a1a1e3447fa887bb5dc4cd5b8c5e402b3ef6e28d7f2dcbed18d5fe4fcb190b8c208485fd9d1a30b43cfd6c7db2354b9a7cbe1d2116fd316cc2e9673848331e09362c93197b1f0326a3d07a9cf11536a7b2aa77408afa71eb3ae4262d2618e44fd49ce09fd4e5edb241130a6110e2a1c0b883c95128c40e89302ee5c0d2b3efbaec7f8caf73f8b647f2bfcb9c29e2e1331ac55229b29337a19ace07ecca3df252bcbf6188d4883241966179872df5fbc4393a53c11c78be02d9951aaba773ecd24ac7c21a2b1b2dfb6c882f6d00d9de36048f5ca552c3bda30956f29e6c5f50afc1b07862fb44993cbb5148c7749ebc8e0006967ed4100fc057465c9acc51d3687c377debda79cebd40db846ea143cac4f59922edf30f555c69c98ff6048d88d78cc818020bcb5615f9724aa5a2ee4c64803eec3012fc7ad68bb933ba04a6eb70083189c80363cc57b9bdbf8fe5af8831611b2cfcbc2dfcd90494d1ce6e0d0ce5b334debd587c1f090d8658c608f271b36f9764f04d32c39eaae89f0f1bcc874ced595d441a8acdb6726144d1c386f5ad92f9bc39bcab8e01e889ecd8375cf492d92605d237b400b237b9683ff888bbc56b3f84dba63f0ed18a766dc1d69b70600cbe92fbb50a4e31154d368b1cae7e72da8d1792e0d67ff885fe1471f8012dc27cfe7c2ea909dc4ad26418ee51eef3b50a9bb846a49353b31ec11deaff9873b712a236f0e2d203db06e7f57a5791e015f467c24c3506e6893164de07955886970ceaef19a2da75a801a22c1f39a86aa64d145fc4669929b16e577708c9c116a89e37e173e375ad1668ef6bf8f5c28c201b6be32e76d6b403685b41ff90aae629e3445f9c9543d94a9dd1e05e1cbe384bec95b24deb245927defbd623ef148ea237f595020a8df6f08c075651445757040afa8a64414be790afd9998d14d1802bca26033748cfd221e26316eded7e04a74d506690cca99f3b965de69e58ecc890524bdf69c193e14ff494e78eb4785c28f3d61fbbbfb3838e6ffb1e193f0c695af2573c8b9b971e72b8419a4e64e9443897cf183eb1d0ab7718ea40d32c4441a0747c249ccee6e4ea2488483bd0fb5cacf166634379a0e4ed7021839cfe44743addb681ed6762f2530150c1dee1639e9b26599041ed507d8f0ef440987e9a483c66c5775b08ffd5d512a71eeba7864f26af34a6b593f346046cc58a285ad92b08679947bd983593f4eefcb9f3336b7febb3063252abfa9043141dc7f4eba585c5040497ce19313a52aa2", 0x801, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000200)={r2, r3, r4}, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000000)=0x1f, 0x4) wait4(r0, &(0x7f0000000080), 0x20000000, &(0x7f00000002c0)) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) [ 365.145898][ T29] audit: type=1800 audit(1593389431.736:18): pid=14447 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16372 res=0 00:10:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8100, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:31 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=.']) [ 365.298208][T14460] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:32 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ftruncate(r0, 0x0) [ 365.381998][T14462] MPI: mpi too large (16392 bits) [ 365.439951][T14467] overlayfs: failed to resolve './file1': -2 [ 365.448940][T14470] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 365.530811][T14467] overlayfs: failed to resolve './file1': -2 00:10:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001640)=[{&(0x7f0000000640)="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", 0x8a9}], 0x1) 00:10:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8101, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:32 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8f18c9ab15d192eec0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_dccp_int(r2, 0x21, 0x3, &(0x7f0000001640), &(0x7f0000001680)=0x4) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:10:32 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) [ 365.784202][T14492] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000180)=""/128) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="94425799558b20d13f4e0807b398b36d641c5f1756ea3cb3ae0817ad60627f9b1eb6489611ca034e19c5767218f74f8c321ebddc365dc6c6f0734f0835755f9d9c98b1d0852338e2213f6f3830383a455c4173c593efb57d928e5c67", 0x5c, 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000000)="f69e14f40a36279f0341148604b034c6e2fe61c22f41ade3bffc0dd9408a4b487d704898a66751b7eb462cc6cd99e44a7b7874729882b99cc5ec4b12b253ed64b7cf4e0f7e4572a9688ea5e5b613c415a2eac196ebdd306c20451c00f05034fd", 0x60, r6}) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0xc8, 0x0, 0x0) [ 365.909252][T14503] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8f03, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:32 executing program 0: socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x14b240) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000080)) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4) 00:10:32 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/171, &(0x7f0000000140)=0xab) 00:10:32 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat2(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40001, 0x116, 0x14}, 0x18) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000080)=0x32) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x4000010, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000004c0)='./file0\x00', r7, r8) lchown(&(0x7f0000000100)='./file0\x00', r5, r8) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:10:32 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202eda930809c0ea9ea68221cc9d73ae99e142b6eb51c2ac8aee0e5ea79d82f169e95514bb94bcd4a3c51038e8f010f72a65653ea4465ec7a667b7e676e62ebf8dc4da28dad8bbf8022d5a2321282a1f9d21293cafdbad950fa9fa6dc75d917e92012c48a46d21dffedea32fda8d9cd0a1c2bab2c46cacee5b999b47a37670af1498f9a6c1ba32f0bea3f4034b9a6d39a591ee787a08de0727189d72761b820777c183a52b391cc76485b7f85d0311e67a8d8b9bbc32488486a0b8"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4200, r0, 0x0, 0x56) 00:10:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xbe02, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:33 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf8, 0x208, 0xf0, 0xf8, 0x200, 0x208, 0x208, 0x200, 0x208, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a], 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "8c6f"}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a], 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 00:10:33 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f00000000c0)=[{}], 0x1, 0x9) 00:10:33 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x7d, &(0x7f0000000000)={r3}, 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000000)={r3, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x84) 00:10:33 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x109000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=""/3, &(0x7f00000001c0)=""/229, &(0x7f0000000300)=""/134, 0x1}) r1 = gettid() r2 = creat(&(0x7f0000000000)='./file0\x00', 0xb0) prctl$PR_SET_PTRACER(0x59616d61, r1) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="232101000000f6f7b6e27d62900eff498139d7db03068711950709eae76b5eb1c0ea9e"], 0x194) close(r2) clone(0x40000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) sched_setscheduler(r3, 0x5, &(0x7f00000002c0)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000002c0)) ptrace$setopts(0x4206, r4, 0x1, 0x19) [ 366.554066][T14545] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 366.601576][T14545] xt_CT: You must specify a L4 protocol and not use inversions on it 00:10:33 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read$char_usb(r0, &(0x7f0000000480)=""/4096, 0x1000) 00:10:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xd601, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:33 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 366.764827][T14561] IPVS: ftp: loaded support on port[0] = 21 00:10:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000020c3067d310002000009040000000000002cf6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a0000007218091d63005c31"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:10:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, "0d3bf5c98ee56c"}, 0xf, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:10:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xdc01, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000020c3067d310002000009040000000000002cf6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a0000007218091d63005c31"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:10:34 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4010aeed, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 00:10:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000380)) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xc8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) vmsplice(r4, &(0x7f0000000900)=[{&(0x7f0000000440)="6f6ace2ce586c2df5b4df78751370ae84ad9331000212d683f6d1510", 0x1c}, {&(0x7f0000000480)="f8d69f0c948b2b6de2e788e04587c7fadece3ac3f67855c15bfde6f10caba5b26eea2aa81955118ea13556081fae55d2dc59b382996b88bc8c5e66eba48f505331d9543c282aab32e13d57a2693045e35511e968f1c7f71788654956a73ed9fa7d2cde", 0x63}, {&(0x7f0000000500)="cce48fbbf6a5a3c8e7b288260e21af34ec673a64740485fc352745e0c82542bc957830933fa8453d4b7e89eaeaecb450555ee0120b79d30bcfe48bc5179766ac49a4cfe3e657359925770a7877119261303a7d81ab8c9e17d6a67f791c2146422d38e4332a73c81bccbff5385c081a4af16d549e8dec2d9b90d780d9a07bfc8fef1a83624a654f86870b610ad38cef9e67c5687eada462517dd1b4628c36f6649bfa86856f2739fd3d2b9627918596522e362e88625966b0", 0xb8}, {&(0x7f00000005c0)="fa9747c0d37edf71a9bf1ae0332a61696caf79a491a21a625320305558f789067226d5ff8dfb247148650f2c9c8732344185ca456d5867fd8daffd1a7281ac41d6075cc9146390345c3c7e31480f5f3bdf033b1fd5bce22cef9628e2f661304867496fe29ef1529436af260e2ad687432a265606543406473aaf01dffb228a4624c0ab1f2389a67700be69b6d9583ca47d636a6696838ddd1412a2388f308007d5524733585f98809160eb676001013088a5c28cf1722caddc2f8e9e011a2bbc44525a9bffb7fe1bb3f49a02", 0xcc}, {&(0x7f00000006c0)="92e315334ae1d1e644fc22eb8748ac0ac4051e8b7760dd82f447adb86331ea48b47c406af0ec6330b1629a7965f03f4b88e1cc7b36c098fde42339abc911a19a7dc7c1260215a50b004072552a718e47d1d43bdc5e2a548275af4ba8818d62e0d3dfa636d521ba6464df5d76b75fff8008d34d195571da3b4e866d", 0x7b}, {&(0x7f0000000740)}, {&(0x7f0000000780)="7c9afdd51fd5bf8d1a4d4929d7fa7e4966881c9030635e1783f7b5d638c83e89fce9e2da6b5b7eb0fa2253b65f7d076197664e80b28616439edc193225df779c2f8cb272173b110cc05666a890d4d6688315d323337b1348d3bab56a2042b9a715f7027b20c099fcf595e5e89c8846e2f8ade77e226aa3bfed85", 0x7a}, {&(0x7f0000000800)="7fa416a63107aaf05d9710272cc8a6d1d2dc41a97a7bdf9485a1c92b545785adbfb6833b16b0eda79b5b049fd44cd039d869c2d09e87ad1e254863dcd6639432af3583e5eae6c6272dec9b7210664759e921731e42beb5f130296e4ba6c1dcb17df051a4612a7bc5efbc002354adf9fe5e174260169c9b711b40ead4069773f48b95a79a58e36c84a708c4b1dfd4a6268f395b12c45bd053ff47694c352e7c543964ebf9df2cae334bc6b238b44d0dcec1cfb0afd1e96fd590ccc6160a4eef3e91b149e662acbbd91984a3f39bf68bb3d1214ea38c56c7d6a76f6d483e87afb8ef0fb66bbe34a9df15a7", 0xea}], 0x8, 0x1) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="2b04f2ffffff0080000001000000000000000141000000100017"], 0x2c}}, 0x0) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f00000002c0)) syz_open_procfs(r9, &(0x7f0000000180)='net/sockstat\x00') sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r8, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000740)={0xe6, 0x3ff, 0x9, 0xca, 0x6de7}) 00:10:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xdc03, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 367.583469][T14561] IPVS: ftp: loaded support on port[0] = 21 00:10:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) gettid() 00:10:35 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="23e6539372930809c0ea9e6a87720e1f6d4935afcca36a4453bca69013a0dea9a9fdfe45de94d807009cd2f163e710831b3db3a2b98d"], 0x194) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$setsig(r3, 0xa, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, &(0x7f0000000080)) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x12c0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x4, 0x10003e) 00:10:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xe001, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) gettid() 00:10:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000020c3067d310002000009040000000000002cf6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a0000007218091d63005c31"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:10:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0x58}], 0x1) 00:10:35 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000000000f045e949a75f1c615186261dbb43d167d921f3d79b5bbc8fa198f31678973e2a18f9d224e736c1d375a82151ae97ccaeae7b369d7982adaf3b294ff15326a0449ca24cbd6c19959ca484da23bc1ded2b39b4d9acd5f3001aff327e6b19a9719d0aa0b7e814dca00f83d56393be4869e256b57eed7cca"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:10:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:35 executing program 4: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x6, 0x73}, 0x0, 0x2000, 0x10000, 0x2, 0x3, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) exit_group(0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20044008}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0108cc1d1d2581c6c5cf381370b0d195c60020", @ANYRES16=r0, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000004480)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="120026bd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x4040000) syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2f}], "000022ebffff0400"}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040015}, 0x0) r2 = socket(0x2, 0x803, 0xff) syz_emit_ethernet(0xc6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) dup(r2) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x3) socket$unix(0x1, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108000000000000000000004b00", @ANYRES32=0x0, @ANYBLOB="00000000fffff00008001b0000000000"], 0x28}}, 0x0) 00:10:35 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 369.266891][T14730] validate_nla: 12 callbacks suppressed [ 369.266900][T14730] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$rose(r3, &(0x7f0000000140)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000040)={0x8, @capture={0x1000, 0x1, {0x7ff, 0x5}, 0x7fff, 0xfffffffd}}) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:10:37 executing program 5: r0 = socket(0x18, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0x18}, 0xc) 00:10:37 executing program 5: munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) 00:10:37 executing program 5: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x12e) r1 = semget$private(0x0, 0x4, 0x5b4) semop(r1, &(0x7f0000000200)=[{0x4, 0x11f, 0x800}, {0x4, 0x1, 0x800}], 0x2) 00:10:37 executing program 5: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 00:10:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x56}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 00:10:38 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0104320, &(0x7f0000000080)={0x5, &(0x7f0000000040)="7886b5fcae558b543ca18c029302a72d14003af9fb760877f90c4800770e9b44664bb1b94bed21a3891ca7c78e1a159aaf04fe1224c46b1fa9ac"}) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="23211e2eda930802c0ea9e40a072006dcb03bb78ad8bdf29980fe7cbf16c596ef1bf12ade7e0d07f80ec4cb251c6d48fd3f5ec9a9034243cdef334394b762e4b3c3c9bec07b601182f09fcb43763efa4bde3874c9684680bb7c4cdb14c71bd166671b05939"], 0x194) close(r1) clone(0x20001100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x600000, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x8000, @mcast1, 0x7fffffff}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="07ab945f9102be11fa4320", @ANYRES32=0xffffffffffffffff], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000000)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={r5, 0x200}, &(0x7f00000001c0)=0x8) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f00000002c0)=""/248) ptrace$setopts(0x4206, r0, 0x400000000001, 0x200021) 00:10:38 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="232120aada930809c0ea9e"], 0x194) close(0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x2000000, 0x13, r1, 0x82000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 00:10:40 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffc}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000180)=0x9, &(0x7f0000000040)=0x2) r3 = socket$inet6(0xa, 0x6, 0x0) close(r3) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0xffbfffff, 0x9, 0xffffffff, 0x100000, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000100)={r8}) dup(0xffffffffffffffff) [ 374.437215][T14734] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.445456][T14734] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.056723][T14734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.416716][T14734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.457368][ T0] NOHZ: local_softirq_pending 08 [ 382.316414][T14742] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:10:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfeff, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:10:49 executing program 4: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x6, 0x73}, 0x0, 0x2000, 0x10000, 0x2, 0x3, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) exit_group(0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20044008}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0108cc1d1d2581c6c5cf381370b0d195c60020", @ANYRES16=r0, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000004480)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="120026bd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x4040000) syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2f}], "000022ebffff0400"}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040015}, 0x0) r2 = socket(0x2, 0x803, 0xff) syz_emit_ethernet(0xc6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) dup(r2) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x3) socket$unix(0x1, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108000000000000000000004b00", @ANYRES32=0x0, @ANYBLOB="00000000fffff00008001b0000000000"], 0x28}}, 0x0) 00:10:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000080)={@multicast2}, &(0x7f0000000100)=0x8) r2 = gettid() r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r2) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r2, 0x0, 0x0) 00:10:49 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x6, 0x73}, 0x0, 0x2000, 0x10000, 0x2, 0x3, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) exit_group(0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20044008}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0108cc1d1d2581c6c5cf381370b0d195c60020", @ANYRES16=r0, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000004480)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="120026bd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x4040000) syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2f}], "000022ebffff0400"}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040015}, 0x0) r2 = socket(0x2, 0x803, 0xff) syz_emit_ethernet(0xc6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) dup(r2) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x3) socket$unix(0x1, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108000000000000000000004b00", @ANYRES32=0x0, @ANYBLOB="00000000fffff00008001b0000000000"], 0x28}}, 0x0) 00:10:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) close(r0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:10:49 executing program 0: 00:10:49 executing program 0: 00:10:49 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000080)=0x600008c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x194) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x5, 0x10, 0x172, &(0x7f00000002c0)}) 00:10:49 executing program 4: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x6, 0x73}, 0x0, 0x2000, 0x10000, 0x2, 0x3, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) exit_group(0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20044008}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0108cc1d1d2581c6c5cf381370b0d195c60020", @ANYRES16=r0, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000004480)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="120026bd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x4040000) syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2f}], "000022ebffff0400"}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040015}, 0x0) r2 = socket(0x2, 0x803, 0xff) syz_emit_ethernet(0xc6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) dup(r2) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x3) socket$unix(0x1, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108000000000000000000004b00", @ANYRES32=0x0, @ANYBLOB="00000000fffff00008001b0000000000"], 0x28}}, 0x0) 00:10:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'ipvlan1\x00', {0x2a, 0x3, 0xfffffffe}}) 00:10:49 executing program 0: 00:10:49 executing program 0: [ 385.708686][T14805] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.716348][T14805] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.185983][T14805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.515874][T14805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.305837][T14820] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 393.354901][T14843] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xff0f, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:00 executing program 0: 00:11:00 executing program 5: 00:11:00 executing program 4: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x6, 0x73}, 0x0, 0x2000, 0x10000, 0x2, 0x3, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) exit_group(0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20044008}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0108cc1d1d2581c6c5cf381370b0d195c60020", @ANYRES16=r0, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000004480)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="120026bd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x4040000) syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2f}], "000022ebffff0400"}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040015}, 0x0) r2 = socket(0x2, 0x803, 0xff) syz_emit_ethernet(0xc6, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6042bf0000903a00fe8003100000000000000d00000000aaff02000000000000000000000000da5f410001020090780000007c607f112d80012900ff010000000000000000000000000001fe8000000000000000000000000000bb620700000000000007280000000208c2020000040000000000000900000000000000040000000000000027ffffffffffffffc2040000007304014f05020200040109f5801a82b88dfe9c3e55598a3d0000000000000002040100000000ff020000000000000000000000000001c86d32a8fe7107bc27dc5d7f6bd62156a6ca000055daf400017a2e1e2851440152fde5f77bddf24362da6e67f07e6b5def47d396ac02e517f6a7"], 0x0) dup(r2) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x3) socket$unix(0x1, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108000000000000000000004b00", @ANYRES32=0x0, @ANYBLOB="00000000fffff00008001b0000000000"], 0x28}}, 0x0) 00:11:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = dup(0xffffffffffffffff) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000080)={0x6, 0x3ff, 0x100, 0x690f}) renameat2(r3, &(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000040)='./file0\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000180)={0x13, 0x9e08, 0x3dd8}) dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x452}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0xbc9}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0}, 0x40014) 00:11:00 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) io_setup(0x8, &(0x7f0000000600)) 00:11:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000001380)=[{0x0, 0x0, 0x7}], 0x1008000, &(0x7f0000001400)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@journal_async_commit='journal_async_commit'}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}], [{@dont_hash='dont_hash'}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/zero\x00'}}]}) [ 393.889682][T14873] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040)) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x7d, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000180)={r6, @in={{0x2, 0x4e23, @multicast1}}, [0x3, 0x1, 0xfff, 0xe09, 0x1f, 0xfffffffffffff800, 0x6, 0x4, 0x8, 0x2, 0x7, 0x6, 0x3, 0x4, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={r7, 0x2}, &(0x7f0000000280)=0x8) r8 = socket$inet6(0xa, 0x6, 0x0) setsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000000)=0x6, 0x4) close(r8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) 00:11:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001300)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/xfrm_stat\x00') preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) 00:11:00 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='m1\xa9\xa2\xb2Uh\xd1\xe6\b0o\xf1\xe5\xe9oDwV\xd0\x0fN\x00\xd4\xbf{\x173za\x87e\xe1\xcc\xf8\xe9\x85\x00\x00\x00_\xb9<\xa2\xd5~\xdc\a\xbb\x16H\xf7\xcaY\x8d\x01\xd4\xd5Q\x8d\xfa9\x00\x00\x00\x00\x00\x00', 0x0) write(r0, &(0x7f0000000180)="c1", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x90, 0x0, &(0x7f0000000000)) [ 394.071696][T14888] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:00 executing program 4: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x83, &(0x7f00000000c0)={r2}, &(0x7f0000000100)=0x10) 00:11:00 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r1, 0x0, 0x2, 0x4}}, 0x20) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:11:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xff7f, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:03 executing program 4: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x1b, &(0x7f00000000c0)={r2}, &(0x7f0000000100)=0x10) 00:11:03 executing program 0: creat(&(0x7f0000000000)='./bus\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f0000000140)={0x0, 0x0, 0x17}, 0x18) 00:11:03 executing program 5: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ppoll(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 00:11:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0x200, @remote, 0x5}, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20}, @in6={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xff}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e22, 0x40, @private0={0xfc, 0x0, [], 0x1}, 0xffffffff}], 0xffffffffffffff25) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x7f) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="000020006fdca0cda3c897577c7599e0db3169a19916c167c6fcb1132fe7b7f24716f7dc1f0cbde86f055a30627f55c7a086d509db6a380f1f2f0ee6ffcdad9c322279df44250cabf0367580a9e7a8d816f7042fe952a7b196c1991273dfb40492f1778c7900d5d6dad635e9d23192", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x7d, &(0x7f0000000000)={r7}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000000)={r7, 0x4, 0x6}, 0x8) dup(0xffffffffffffffff) [ 396.488191][ T29] audit: type=1804 audit(1593389463.118:19): pid=14927 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir844981768/syzkaller.6LHAWA/166/bus" dev="sda1" ino=16382 res=1 00:11:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="97ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) 00:11:03 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000066c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001100)="7f8187bbe7ae57f9708da4177ba207ca40dc611f76bffa177757215e4174bee52acebdfa38c1df5f84f2f5f92c60e4814e6f0d311bb1780365d99e73d12b5fdb4a5f1311b2912c8bdebb3fc514b6", 0x4e}, {&(0x7f0000001200)="a9a210e9d28a84756402047efda9bcfcdc26667c776a9226b4b99d9f66fa073bd546b6100bb1d3125925b0c9576d5d307ddc", 0x20001232}], 0x2}}], 0x1, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="00082abd7000fddbdf25030000001400020076657468305f766c616e00000000000014000200776731000000000000000000000000000900030073797a31000000000900010073797a32000000000900030073797a3200000000c177305884940595024e566bc5166d8de33462bdb19607e96b353c57d23989134944c9dd92b41991f0b9eb014f62de894814570cbb4a4b1f168ecc9914e63c55b02c55f2411661877eb270b490f74c50026d1e5204dbf3e8d6921f06a3a0b71d1ae23602fc1d3bd9f5afba8f8271c43da2d8faa6e70e51"], 0x60}}, 0x50) 00:11:03 executing program 0: clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) [ 396.565960][T14931] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 396.678204][T14943] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2402, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)={0x7, 0x4, 0x4, 0x20, 0x3, {0x77359400}, {0x4, 0x0, 0x20, 0x1d, 0xfc, 0xbc, "e93b7cbc"}, 0x834, 0x1, @userptr=0x7, 0x0, 0x0, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0xc) r5 = socket$inet6(0xa, 0x6, 0x0) close(r5) dup(0xffffffffffffffff) 00:11:03 executing program 0: 00:11:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfffe, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:03 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 00:11:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x41c1, 0x88198, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x89a}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) close(r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) [ 397.074273][T14965] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:03 executing program 0: mknod(&(0x7f0000000080)='./file0\x00', 0x2080008007, 0x28e6) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x10, r0, 0x1000) getuid() setsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x11, 0x0, 0x0) [ 397.230675][T14975] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c05a, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:04 executing program 0: mknod(&(0x7f0000000080)='./file0\x00', 0x2080008007, 0x28e6) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x10, r0, 0x1000) getgid() fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:11:04 executing program 5: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x1000) syz_usb_connect(0x0, 0x30, &(0x7f0000000040)=ANY=[], 0x0) [ 397.567590][T14995] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:04 executing program 4: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x3, 0x10, r1, 0x0) madvise(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x2) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) 00:11:04 executing program 0: [ 397.683121][T15004] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:04 executing program 0: 00:11:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c05b, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:04 executing program 4: 00:11:04 executing program 0: 00:11:04 executing program 4: [ 397.974700][ T9556] usb 6-1: new high-speed USB device number 14 using dummy_hcd 00:11:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7cf"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) close(r5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:11:04 executing program 0: 00:11:04 executing program 4: 00:11:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c05c, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 398.254647][ T9556] usb 6-1: device descriptor read/64, error 18 [ 398.674689][ T9556] usb 6-1: device descriptor read/64, error 18 [ 398.954649][ T9556] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 399.254476][ T9556] usb 6-1: device descriptor read/64, error 18 [ 399.654612][ T9556] usb 6-1: device descriptor read/64, error 18 [ 399.775118][ T9556] usb usb6-port1: attempt power cycle [ 400.494367][ T9556] usb 6-1: new high-speed USB device number 16 using dummy_hcd 00:11:07 executing program 5: 00:11:07 executing program 0: 00:11:07 executing program 4: 00:11:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c05d, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:07 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffff9f0, 0x30000) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000001680)="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", 0x801, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r4, r5}, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000001680)="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", 0x801, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRES16], 0x194) r7 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400, 0x69, 0x1e}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x80082102, &(0x7f0000000080)) write$P9_RXATTRCREATE(r7, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:11:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x100}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) [ 400.674496][ T9556] usb 6-1: device descriptor read/8, error -71 00:11:07 executing program 0: 00:11:07 executing program 4: [ 400.721698][T15077] validate_nla: 4 callbacks suppressed [ 400.721707][T15077] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 400.746137][T15078] MPI: mpi too large (16392 bits) 00:11:07 executing program 5: 00:11:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x16, 0xff, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000080)={0x5, 0x0, 0x400, 0xb0b0b0b0}) dup(0xffffffffffffffff) 00:11:07 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x1) 00:11:07 executing program 0: 00:11:07 executing program 4: [ 400.894548][ T9556] usb 6-1: device descriptor read/8, error -71 [ 400.896552][T15093] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:07 executing program 5: 00:11:07 executing program 4: 00:11:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c05e, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:07 executing program 0: 00:11:07 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) sched_getparam(r0, &(0x7f0000000000)) 00:11:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x8}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) close(r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000000)={0x6, 0xfffff211, 0x80000000, 0x7, 0x3dfc}) dup(0xffffffffffffffff) 00:11:07 executing program 5: [ 401.181027][T15114] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:07 executing program 4: 00:11:07 executing program 0: [ 401.328093][T15129] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:08 executing program 5: 00:11:08 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) r6 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000001680)="5dbb138b61c9c3d0aff3f8d5de0eb0585be1132f47222915eeb1b15cfa2a51871ea0dc532385fe95456f78ef8aaa75355899372b5df69b718a55d83a8c7697d6771960f6568bef8e420e9a463178be3f050369c54ca7a83c1773423a7d977fe9a75104274b8aab2150c5fcd9a7446008d287a5b1b30f4229a508afa34da086103cb67f3211590674df49280cc69ae475e92bc7e6ccc22dc022118b014b5551cdfa05aa30237f4872ba4c2518bf39d685320557ffdab02fdc973b6547b824c2c0bf8fd0c696883b9a1f7bf9ae28f4f306dffb60bbc494e8620084241d93872f130a6207535eb7eccaa393446a253ea9a6612811cf9e9d0ce65939efcc8ba520f4c9e5221b49a96250df802f0a1aeb6747bcfeed26c69cb47ef1376d12b74d296ba33389e0b1fdd3067e6ae6c1e27904e51e080ed183319a71a68c982b9e9dda1ddad6dc66a3885630e4f242b5318a0136d5c13e937db9095716b73445f64de3bbc369b9c695f89a64ba4286a6a635e7dccae9f58b4a0edfc2690982128d8b501c7391d8dd78c561e9465eba5caaa981b07e5cb91dea75201dd3ca81849cd43aa4b9473c7adae6d68e4475ee564cb663466f522b8c691be94046224ba960dbcdc6b7ed8e9f43385ac119af15497ebd0f397ba8a236e0f699a3f2238465e85aa28d695d089e6d41aeadbe2ee260e8b450f0242ee318b496cbb1538d0c39420093d413aec8c168eee26e09e66f5ecc903f0f3880a54995a0817ff5c8e8b6f6f4ed508600eef6a8b1a7f1f4747e70b5ae7b3fbe43ecbe456792fbfc7b5563ac50a83566f4c73c6263090dec802f0704d8287fac9217e1732372b54e46ebafc3e71f5ff1e84da05c4089b84a0f8d1354a7a53e9cd79900e8bf0d88156b9e81d1f8bc057ca73c181149a42532e1f80dbc02c1a8b6abbc36d31437eb3e1e9946d2427ff8c9df5310a9d904622c6e11b3fc5b143fa8230d88218323ee0186b06cedcb9f0a98747a7616153d3a0543fcf3eec0e49f4e5c9e41af866200cac85362e905cd4ceffbdab490e66b78ec1b304b00cccf8cb93144d5609b01d0be49302db639824af5cf5f0798fd0986fd79a5cb721885c6da6aada37298ca79a96f2d27828e50fe9f09473cd1d13aa0faef7710aae9fbcc4be7bbb38b9013a876189111f8e5c285a1c6974b763132358f41e67ba255f6095d78c365d96f4a6347dc4dbbad25ccf164cfad618ad57451367e50069a2b2edc5ddf0f143d11bf7bf0b72244617e12497225b74afebcc58cf2fc2d81fbd5ddda0e8a78bf4aabba4ab2ca0c97ab96209b7f92115fbf2a441bdd81d4cad0d37854ba0872d0c9b2301b1a61b40701df16d7a961e9a281bbe8dd30882c56a1d5a76af48dffc585f6d8a6448855897e3fdd5731263a1607106fa85f8425fd0c6bb54ca9a919c529b0043e436e9fcd1f3a7189d3f5ab1fbb37294546aca07ce41980f29d215bc922813d50a9492306a740df3cb3690af1dccd59e329bfb8ace592c7cca7423f27326a742dc47f555f6b4d77642a548529f4393ed1d758797ac648d5e6b485df4ce241e386c39b7a287b352a0ab8253a2c53bcdd544ab63a194bec3404710a1843010c546a1a1e3447fa887bb5dc4cd5b8c5e402b3ef6e28d7f2dcbed18d5fe4fcb190b8c208485fd9d1a30b43cfd6c7db2354b9a7cbe1d2116fd316cc2e9673848331e09362c93197b1f0326a3d07a9cf11536a7b2aa77408afa71eb3ae4262d2618e44fd49ce09fd4e5edb241130a6110e2a1c0b883c95128c40e89302ee5c0d2b3efbaec7f8caf73f8b647f2bfcb9c29e2e1331ac55229b29337a19ace07ecca3df252bcbf6188d4883241966179872df5fbc4393a53c11c78be02d9951aaba773ecd24ac7c21a2b1b2dfb6c882f6d00d9de36048f5ca552c3bda30956f29e6c5f50afc1b07862fb44993cbb5148c7749ebc8e0006967ed4100fc057465c9acc51d3687c377debda79cebd40db846ea143cac4f59922edf30f555c69c98ff6048d88d78cc818020bcb5615f9724aa5a2ee4c64803eec3012fc7ad68bb933ba04a6eb70083189c80363cc57b9bdbf8fe5af8831611b2cfcbc2dfcd90494d1ce6e0d0ce5b334debd587c1f090d8658c608f271b36f9764f04d32c39eaae89f0f1bcc874ced595d441a8acdb6726144d1c386f5ad92f9bc39bcab8e01e889ecd8375cf492d92605d237b400b237b9683ff888bbc56b3f84dba63f0ed18a766dc1d69b70600cbe92fbb50a4e31154d368b1cae7e72da8d1792e0d67ff885fe1471f8012dc27cfe7c2ea909dc4ad26418ee51eef3b50a9bb846a49353b31ec11deaff9873b712a236f0e2d203db06e7f57a5791e015f467c24c3506e6893164de07955886970ceaef19a2da75a801a22c1f39a86aa64d145fc4669929b16e577708c9c116a89e37e173e375ad1668ef6bf8f5c28c201b6be32e76d6b403685b41ff90aae629e3445f9c9543d94a9dd1e05e1cbe384bec95b24deb245927defbd623ef148ea237f595020a8df6f08c075651445757040afa8a64414be790afd9998d14d1802bca26033748cfd221e26316eded7e04a74d506690cca99f3b965de69e58ecc890524bdf69c193e14ff494e78eb4785c28f3d61fbbbfb3838e6ffb1e193f0c695af2573c8b9b971e72b8419a4e64e9443897cf183eb1d0ab7718ea40d32c4441a0747c249ccee6e4ea2488483bd0fb5cacf166634379a0e4ed7021839cfe44743addb681ed6762f2530150c1dee1639e9b26599041ed507d8f0ef440987e9a483c66c5775b08ffd5d512a71eeba7864f26af34a6b593f346046cc58a285ad92b08679947bd983593f4eefcb9f3336b7febb3063252abfa9043141dc7f4eba585c5040497ce19313a52aa2", 0x801, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000200)={r6, r7, r8}, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000001680)="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", 0x801, 0xfffffffffffffffe) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES16=r2, @ANYRESHEX=r4, @ANYRESDEC=r2, @ANYRES32=r7, @ANYRES16], 0x194) close(r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:11:08 executing program 0: 00:11:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) connect$ax25(r1, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x80000000, @empty, 0xff}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x3b}, 0xb14}, r6}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x4, r6, 0x1c, 0x1, @ib={0x1b, 0x3, 0xe9f, {"aeddb006395a25950282b7ac85efa05a"}, 0x400, 0xff, 0x430}}}, 0xa0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000240)={0x9d0000, 0x5, 0x108e, r1, 0x0, &(0x7f0000000100)={0x4a0480, 0x200, [], @p_u32=&(0x7f00000000c0)=0xb008}}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_GET_CLOCK(r8, 0x8030ae7c, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300)=0x1, 0x4) dup(0xffffffffffffffff) 00:11:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c05f, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:08 executing program 4: 00:11:08 executing program 0: 00:11:08 executing program 5: [ 401.567121][T15144] MPI: mpi too large (16392 bits) 00:11:08 executing program 4: [ 401.636532][T15150] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0xdc, 0x1f, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f00000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x4, r3, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:11:08 executing program 0: 00:11:08 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2328212eda930809c0ea9e7cc66ec57b8b160d22344c007c3c9bd7f3a8335c39f5e728a75f5aa509be406206630d1e48a02a37b15d3f43963e5d5e9bb0da343621107583869c16ce300dee3d44e7cb332640b7bf5d5dc464cb4be6e0759d57600681564fe51b61adb44951c6ff6382c185e6466f356ac60b9ce59178d6604b58e47ba5322711c63027e705b83b9a4db3651e8f88226af6293420a6cd5a1bf3fbe0a99f58b75d5a26c4bbc902659a60f022181c05ccc6cf7ed2dc3eac89450efb3b4db81d1309b996f8234f51d6e8d71c5c54"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:11:08 executing program 5: [ 401.786304][T15166] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:08 executing program 0: 00:11:08 executing program 4: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x5, 0x800) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x2202) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xfd0, &(0x7f0000001240)=ANY=[@ANYBLOB="1a00004eca084561a7d76e0a9633153df6ea78457f564006e6a554fb59c30000d600004e9d706a21c1428c10c8a58021d1c0f8fd3b679169034a4165f362a7ec7d7484a455f5e438a0887ccb050fd9a99844b9dbd21a315e9cdd540b55ab1711e08389f5f5b4cf9f9e9042f229f678279d677ccc1501c051e00a69222a2edf87b7fc3ee12a0629ecd748ae8174ab3aef0e7ae7e0094385270860a07ba05b4ecefa8d65aee46afd53e29d8b756c0231e044daca2ff45a084b48a7934e4c052dc05d8dc64dfb16033bc29fa58436acb41b4a56f587b7261ff7552c68de07f89a753b9c025fcc30d68d793a2f7c293081711eca50e0cd872d01282d574c57f77ef223a10000c900004ea8e7f86a9835bdf54e8bbe872abf661fd80c1e832eb89123fe8ec6f9ead7c937ccc185ab4a89306d6ecd888b5eea1ca57169f5dec7fcbfbd7fa75bacde0a540b3f1334157598322bef5644183392feeddeed8d70fa71c78bebdcfc4b48d7118b8a9fce362d3a5a3d62d119d44b64f3c570ccb454e6f88275f1c7260da725d7411d7c25c7e5f8b81674aaa159c2f1231fa68068fbd255cec5a43e998d6ac80ce74694f7a3741f5345250427506161950eca351794c18a3eac678d4d1f400a9e08204688cbeba0d79b35e0a56d395e000000000e004ea64b8220b2334db092e48d230000000039385141a97c28198ca119caf0efad16b3b7b509c716f2d26a9e6aee9fd91a86ab1febb84f000ceadb9b00049ee81a25faa224852e0a99e1d8f7132840c6483cfc05b1cbcf083cbf04fb1918aa8f52efb6805964f1d99a84ad97d470a4eba35093990974a4e695e6901a297657137d31daebaee9e823856f80aec1685fe4851d1ea0b5258659fb75a3babe8e9294303ea423b6e2a7bea0dcc420a680da93a3d8ff7aa0604c88fb350f3b9fc37e12469884aa8ded6d661a89d66ca7ddc1545a2769e7e65b5d79414b3a29e3ef834e01ac70c370c9bea57eef237a107cfc79737592532a0d49912add3caa7f7616b8313b709c129dcdabf2b8a59e02cf9b19e54536e52dac27db1f24f8416602ce6a5e338220185b852ea4307a2d1db9253ebea7a419669974c469d46ff614d7f0d0b95e60764edf13574c55926eea4c09cba877b3c1f01f9c32455c807e7b49d5f4e29393f28d68f1ef0091eb6dda201144058d8cb9df2594c76713bfdc14fda0265cc21be479d7fcd2e7be13e867806dd606a1d21d8c7891d01cef08b66cb7b7eaa30c47de06d4fe93777fa35c4be18c215a2a287cedeeaf68444b274e5113efa71c2e37e99745d2b67edafc0cfa5c42256ef2778efe982d809a2fff6f9fd3cc1798725bfce6d43a4a07b246abf06fda5f4b4cf548d4fc545d74b41c5dd54ddece9248c0f747ef7e15451ca562b8269beefa4fb89564f79585c2666246f8c4c0bf398bc69fe00001f6a1c46392cfd0cbda52a5c879c48c7bd973ca35a17d7e1bba4d89dcbcad2824b271d161bd1654e18ed9daa5e8413980eaf2813537dc24aa97054fc335e2a252e9e2d8410ea2abb8fafc1bcbe53436e519098c330538ca10be5bb84541c2a63b879ad2b22acab3d6baac08e1069cc8d809bcc35a13ec056888fb0143f6a3bb822bb1f5e71bdfac7d00279f12f8a9d6dd3a527c7abc74f571de1110aa81e0dec749edf2e3fbbef5ff93f7afc8405e3b2b689c0ef525835270c05748dd2578e7bcb3f01bdec1d8ffb75234b71211226d2d36c0ab6c043983030a9eef70ac2b7cbbf43a39d5c3deafe081a791c2615794787a4a555744263639e2867ef94583d25daf0f99d30a23b9181be7a273adfb3e794342dbed4781521fcc87c36839438232f9c89744451d7af88f30e0dd06c9f6ba4e90ae7be0342d0c13ca4977b7860fe572a298203706773d8fdd3c34f1e2097e720ddb1aa7117015172e7e3ce440b9648a4a84b950bf5d09cf66ffd2abda366ba55b0ac8c601bb8490190d7e2fe6af20245e4e314560f6d011ffafc2341640edc88832736265b4a15f93ba929f619bc6decc3eea54dd8539766c9dc989a774a62f5daccff7f85e1c5b55129442175a0e1326b0f75ca6f028776129666a9e0ab7d9a3f9d14a7890ea5a5e7c9519e62001a5b56307b7e6c6a55d34c66b5d9bdae50040618726d6cd56fcb0de7b59a6294af754476152a1685ca7d5fe0cf8deb152f8df0e0872ddf0d1b08e439f5981358881f68887deb65bb26a197d0b3d3597e0a7ade5f41992fc498ad8f1d724f6470cff6a35103307d01b076283dfdcaf1b94a7d805de19fbc737771ba4dc15f1e4ff2036716ee978dd4b67bcf6f70071bb92d854802537cedb18565842bb7fd4ffe9dd76bdc7df1be34a5d6abef5c069679a12a693860d690a8ed660c3e4a4d76829d0a1c940160d05af9d7b5f9fc6d646b5d06aff43221eee44952fb1df8c30e3fc40010fd699abcf19c8633619300bef64cad681c4e4610f782478a51f0a26213668ce8a15b0f7f59011fa70753ff0c35a53212f207bad57a5b66ede484b3c6323d2f2235d451cd5604eac791ed995d291e7064a6de4a41228b3f0b32385df9b644313bdcfe17195420567a054c1c7af6b482c628dc161b966505a8a2937b9f08c1ae082a8d3c9737ef01c9b522fb86fc15654c279376940b2a2855cc962ae0dcba340ab1002d214e21e198f51d7536b2741fc23b8ef3b98aad32a25303a83a3b45b6f99c543b2c76a4836354985768e4d798bf19efb0c28f614a7e2757bcf4ed93caac6ca8c85a79a6c1395b4c7ae55da37acbc715286a335de1bb743e028bdaa94015dbac39c88584ac9d6d855305f32d5e26600e02b13c21908c624da322078d33bd9354a14e9be9a42ec7a65995524cb8d10d6dbb7a126920b84fe01e6ce11543868efc0e292817fc11a55a43831b56140bb3534a3e6b898fda613d5cd898adc571ec28f9774073ce50847715cf0a081fdba3ae1c85421ac331a738707179b17c6e8c4119ff1cc7b68a97fa020702fce98f5f9580366169eb6141b9fc6e888a09254a7140105abb2491eeef2a3c57061b9e8d30ddbec1dca83026f4bed03c450366265d2634a624164b35840fb5242390e5a40cc838db8af9b25a6cc272f589786be249764f6b14289dfc654bc1eb610efaaa5abae7511a81aa5e92fd28af2d413b7b49b1213257f7a5b1edd977e15ec508131b980e865f5ad79fe1612a9f1bb9f8ecaf1cba3cf677b3eb9559f162f2e6908813bb8e0b09e74e58b87db58fa981536d0836b53e61d90870c26d52da3ec457bfdc333c499d2bd239390565bc624bd0195ec7a71c625986ebd3a5ce107224ef1022ffc6144e3c5ff43915196ff3d016deb11f73dabfe3c1c7550cdafc7ca2dbd857a5f1224273572e3efd8adc555016e1ca8ec718acceaeb6d600b9bb82dc879d93bc417344378441968812a908434a92d11b67ab0827924188057456428b23e5d4e796d1c565f7d2be5ea377ccbbeeb6ede8b3d13af8ed9e27b29d28ee77ecab4b561e96c316308375d538bb2db37db384561c6fe10d3f071356109e181d9a5b517044d3b58506e83be45be0de548e0b54b36d5f8bf072704f0b40eb519b2b435ac6747721e40b7e880202c9bd7c9d61c17f0808f0679ab9147f82edf1dcef35288c74bd421ee8fdb3075d7accbaaf010ff20ed88365b156d5d672eb0f684efd678527b52f1385a88c50180bc3943c7c53d0832ac58cd839a867eccfc989325397821cd1962a063ae81d5cbb1ad983e12bde34ed207bab6f1a40a2e51fe87b6cf5d6322a62eb2a3836a061f7185b65256305986a7cbb88081ff70c99bec75d52b2bccf05c78d79ad14b9acacd6b404d5523363e7fbc472bf9938e69d89c3beeb907d384961716a478998f447255cf076a470a08fd6d370eba807b417e56a1a73df12e35d4d9fcf0bbf537d055cf859df5ec7a6a209fa3b2b0e8719dfe08378b19c3a676a27b4dbfd6a0155adadd490a4cbc6b8cdfd614f2fa7260e68058f57fe60bc2952b3d7b8a54abede25db1a8c0c865407be7e634130f558c93b54449bfdc608051a635af5a2b800659ea50854ee1a21b21e2cd2ff2b027db31af2642c5037e1db9d1203d580b76de786511cf64a9a4cc07eba9e9ac8983ae78b8f629960245827c21902a4d4748ffd1530fff1ca24acf2a473f9c6fdee04c0e42bf77b88253929e696dcbfb11d39570079d5960e7226977ee99944deb9efb6195fa29c5c7b4355b66b42e2a1bd24154bfd90a5896a6795d5080028305833448723bcea9422eb251773caa0bc5b300ceb9f46cdeb74dfe1471123a9bf9070de2ec6f5a97c17f1cce979a20ee69bdf4a669a500b9253055303aff73a44159a7fec0ada5d7be42df4b4f4dfe13c2b7342dc548d2c0a6fe2eedbfb6b5ce6337575dd8cdb37bd43855b8d254139a79"]) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1e4, &(0x7f0000000500)=ANY=[]) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000a80)={0xff, 0x0, 0x0, 0x0, "e89f8179d2e21fb45b393386675694ac98f6fae678bd2a2f47101ecb943abec2"}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000080)={0x41, 0x8a08, 0x0, 0xffffffff, 0x2, 0x1f}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x1, 0x4, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x60ff) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x42601) write$hidraw(r3, &(0x7f0000001200)='\x00', 0xffffff45) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000001540)={0x1}) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f00000000c0)) 00:11:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c060, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:08 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:11:08 executing program 5: 00:11:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x0) close(r4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000000), 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3f, 0x0, 0x0, 0xe, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x4, 0x6}, 0x90) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4068aea3, &(0x7f0000000000)={0x7b, 0x0, [0x4, 0xfffffffffffffffd, 0x4, 0xcc]}) 00:11:08 executing program 0: [ 402.066576][T15185] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:08 executing program 0: 00:11:08 executing program 5: [ 402.178617][T15202] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:08 executing program 0: 00:11:08 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0xc) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 402.304307][ T8921] usb 5-1: new high-speed USB device number 3 using dummy_hcd 00:11:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c061, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0x10}) dup(0xffffffffffffffff) [ 402.488311][T15223] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 402.582687][T15231] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 402.837161][ T8921] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 402.858870][ T8921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.882747][ T8921] usb 5-1: Product: syz [ 402.893871][ T8921] usb 5-1: Manufacturer: syz [ 402.911120][ T8921] usb 5-1: SerialNumber: syz 00:11:11 executing program 4: 00:11:11 executing program 5: 00:11:11 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="23ff202eda93080997581b48c06827c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) ptrace$setopts(0x4206, r2, 0x0, 0x18) 00:11:11 executing program 0: 00:11:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c062, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) connect$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast, 0x1}, 0x10) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r5}, 0x3c) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', r5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x41c1, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x340}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x6, 0x0) close(r8) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf2508000000140003002001000000009dfbda0dd0edbd0000000000000000000114000300ff020000000000000000000000000001080004000a0101000800040000000000050075f582627cf2a68c87f66df526ac47372645152b75235c15f01055a3ef6853d5bf894f170343bc07ad6a5e9b52aaf3a039e0f0cfae1769dafe799c037be5cfe224bd736b1c8af23782e5845e129ea2ff32686e06055fc42c9abef2667e195e7ca6ce32323ceb6a0b"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) [ 404.971934][ T9556] usb 5-1: USB disconnect, device number 3 00:11:11 executing program 5: 00:11:11 executing program 0: 00:11:11 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000002c0)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000002c0)) clone3(&(0x7f0000001300)={0xf53272b71d9dd8e9, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f00000001c0)=""/161, &(0x7f0000000100)=[r2, r2, r3, r4], 0x4}, 0x58) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f00000002c0)) prctl$PR_SET_PTRACER(0x59616d61, r5) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:11:11 executing program 4: 00:11:11 executing program 5: 00:11:11 executing program 4: 00:11:11 executing program 0: 00:11:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c063, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0xd7, 0x3516, 0x7, 0x4, 0x10, "d6dd984f7354525e3f7c6d12a03f0ce3627c6d"}) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) close(r4) r5 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x3, 0x149200) sendmsg$nl_crypto(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delrng={0x10, 0x14, 0x200, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xc0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) r6 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f00000001c0)=0x8, 0x4) 00:11:12 executing program 5: 00:11:12 executing program 0: 00:11:12 executing program 4: 00:11:12 executing program 5: 00:11:12 executing program 0: 00:11:12 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000001680)="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", 0x801, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000200)={r2, r3, r4}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, r4, &(0x7f00000015c0)=[{&(0x7f0000000000)="92eec20b555cf26dafd21fe2eff70a943e298c781e48ba923bb21c4fad2db9abb78bb306c655bd83925c713ad6b66e29bad2d882d3fe301b7dec4ec10865d0964d541a9559b66a1db830c770d1fe32b9c12187077932522b7e892fa8ccdf7f4021545cd7d191", 0x66}, {&(0x7f0000000100)="0e7389f2a42ab1a7db1849453531c9f512b8722a3f04b51aefc862518b22fd1c6d68c3e20ffe8bb2e75fdfc7bfe779fae4199552941ab34b1d23006b87e538d96e9434fa2a", 0x45}, {&(0x7f0000000080)="0359ab4865f1cecd5de2560a712aa0582caf4b411c853e572d90b42d6757908cfa646bf1d87047125a77cb86409d06a44a", 0x31}, {&(0x7f00000001c0)="4ffc8f56d2e0cb72a1c361f8770952c2b87b6a282342f5ffbd0390f149ffe6179603e2576175", 0x26}, {&(0x7f00000002c0)="5b6465341d66c3c0d757ff483f2af97d78c563b1c303e0a12fb38af6be35dc84e170dd2b3c2b7c4111234c60961d36eeed382088a500b09e7d7ba3e8533ce40c5aba8a7a6b4d6d1c4344a75f2ddbde29b63010d54f487cb9ecf7542d2a9936c2a92a8fc309c409b3163e769f535b7252fec8a25e6173b9d214385972cf7aaa110937be754975f1cd4228bf2baab45ad2a6bc26ce5d1e5e27c7d35ad0cb258e938a6a3d9e26", 0xa5}, {&(0x7f0000000380)="e1ba4490216b3f6486dfebba42283103789372e34c80e0322f261a7df9d7200683f6cdfee0498a4a78cf52ffdc9a40c9f5b71116f5fa42d8bf5934326782cf673b79f8ed85a1a861eab555c66d9993f218e1d3e4082b1e2205d39927591c950623ee10489e88f1b7c50ecdc0c1e2f6daaa86b75ee83a17a7c777d1c5887d4c98a09ab6eb0c5f42e4b210de1c31126ba32f9535eb4f3223b95ed06933df8041a2889f", 0xa2}, {&(0x7f0000000200)="1494e372eca94c85", 0x8}, {&(0x7f0000000440)="8af317c7411cd2e8bef5599c4d6e91364c28aa717cd7c7ef6d60b642c9d01ac636a99ae8da2912e07cb89a7be13471e9ee9224a734d7e07aa7568bd90aa32b5ceafa59869c7cb28d8c68ddaed6d750b053455d897998040dd3acbe9976f7de", 0x5f}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="1955c2fdc28b0d6a8339e452f63e3d5c3353158c3b2fa64e8d1cb01951d1ef44fd63da06d245270e56470302931074fcde3268ee36fc909c3476acf8de93309b22d9be8bf2a17677dbc1c6423207b95ef35dd0827fc48e6859f3b03a742df95831e527f4f376c22da498cb3c0f4bcfe452314f231a98b40dd66b396e7bd94fe685614b4e06a5affa8283eda12aa059ec937c18911a100fd493b29c5925e15c4a3210cb046684f99a7a0a5aa18350334e675234df9eabbe3f9d12c83b5ef40e558843502abcab62b871506302970b", 0xce}], 0xa, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202eda930809c0ea9e"], 0x194) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) 00:11:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c064, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:12 executing program 4: 00:11:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r4}, 0x3c) r5 = socket(0x200000000000011, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r7}, 0x14) getsockname$packet(r5, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r8}, 0x3c) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00052abd7000a9dbdf270300000008003b007f0008000000370000000000bb48c7bee154a2070ea9985a268c505df7254580956f66a01a629c19b45d79e71218e85f69a161da1a0d5f1865", @ANYRES32=r4, @ANYBLOB="080003000000000008002b0000fd0000ec000300a32bca6561eb68c81c480cc98724a9025de78d5904d0cdc2d631502121f18895b20a575317fde58f330fa9a749f23be461edb8529248b605249b5c4ceb4885dd18d801259e9796104631543263487164a46cb969c1c01f00350d5267550e6eb6c8853d0772cdb42ae7daa429df07dfc79e725152748ad26ed096853411f5a8da7664c30a87330b7dcc1440f8d9be792d75ffd64bc84c2fd747377cd3b3fd311cc4eecace33", @ANYRES32=r8, @ANYBLOB="23f645f28a16468e97cff1e79ae08389ffcf3c518f998b98e8d5273650157367115589583269d648965cce98b0d172fe14a27fb63d990bd385dcbd95019890bee9ac535058c9c05da9f7db3fa2c723489bd6"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) dup(0xffffffffffffffff) 00:11:12 executing program 5: 00:11:12 executing program 0: 00:11:12 executing program 4: 00:11:12 executing program 5: [ 405.915002][T15321] validate_nla: 4 callbacks suppressed [ 405.915011][T15321] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:12 executing program 0: [ 406.022155][T15328] MPI: mpi too large (16392 bits) 00:11:12 executing program 1: [ 406.047907][T15335] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 406.080148][ T29] audit: type=1800 audit(1593389472.709:20): pid=15328 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="sda1" ino=16366 res=0 00:11:12 executing program 0: 00:11:12 executing program 5: 00:11:12 executing program 4: 00:11:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c065, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:12 executing program 5: 00:11:13 executing program 3: 00:11:13 executing program 1: 00:11:13 executing program 0: 00:11:13 executing program 4: 00:11:13 executing program 5: [ 406.406567][T15360] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:13 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x5c, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}, @qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x5c}}, 0x0) 00:11:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x11, 0x800000003, 0x0) socketpair(0xa, 0x6, 0x7, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) 00:11:13 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a"], 0x0) 00:11:13 executing program 4: [ 406.544260][T15370] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:13 executing program 3: 00:11:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c066, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:13 executing program 4: 00:11:13 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003020000102505a1a440000102030109025c0002010000000904000041020d0000052406000105"], &(0x7f0000000400)={0x0, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="050f"]}) 00:11:13 executing program 0: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}]}}]}}, 0x0) [ 406.799673][T15392] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000380)={@void, @void, @eth={@remote, @broadcast, @val={@void}, {@ipv4={0x800, @tcp={{0x20, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x27, 0x0, [@local, @loopback, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @rand_addr]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{}, {@multicast2}, {@broadcast}, {@multicast1}, {@multicast2}]}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0xa6) 00:11:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r2, r3, &(0x7f0000000540)=0xb901, 0x4000000000dc) [ 406.937278][T15406] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 406.954609][ T8480] usb 2-1: new high-speed USB device number 3 using dummy_hcd 00:11:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c067, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:13 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) 00:11:13 executing program 5: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 407.149157][T15425] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 407.174634][ T9556] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 407.194059][ T9402] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 407.243926][ T8480] usb 2-1: Using ep0 maxpacket: 8 [ 407.364236][ T8480] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 407.375788][ T8480] usb 2-1: config 0 has no interface number 0 [ 407.391255][ T8480] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 407.418398][ T8480] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 407.429487][ T9556] usb 4-1: Using ep0 maxpacket: 16 [ 407.463892][ T8480] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 407.473667][ T8480] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 407.497070][ T8480] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 407.517761][ T8480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.532110][ T8480] usb 2-1: config 0 descriptor?? [ 407.564374][T15384] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 407.569166][ T9402] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 407.612604][T15442] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 407.621839][ T9556] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.637641][ T8480] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 407.647144][ T9556] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 407.661042][ T9556] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 407.672733][ T9556] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 407.750893][ T9402] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 407.776320][ T9402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.801337][ T8480] usb 2-1: USB disconnect, device number 3 [ 407.812723][ T9402] usb 1-1: Product: syz [ 407.828718][ T9402] usb 1-1: Manufacturer: syz [ 407.848034][ T9402] usb 1-1: SerialNumber: syz [ 407.885983][T15404] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 407.887321][ T9556] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 407.906205][ T9402] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 407.922469][ T9556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.948676][ T9556] usb 4-1: Product: syz [ 407.965235][ T9556] usb 4-1: Manufacturer: syz [ 407.981303][ T9556] usb 4-1: SerialNumber: syz [ 408.041221][ T9556] cdc_ncm 4-1:1.0: skipping garbage [ 408.047844][ T9556] cdc_ncm 4-1:1.0: bind() failure [ 408.134999][ T8921] usb 1-1: USB disconnect, device number 6 [ 408.246507][ T9556] usb 4-1: USB disconnect, device number 3 [ 408.584009][ T8480] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 408.853936][ T8480] usb 2-1: Using ep0 maxpacket: 8 [ 408.893962][ T9556] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 408.993901][ T8480] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 409.002154][ T8480] usb 2-1: config 0 has no interface number 0 [ 409.008409][ T8480] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 409.019799][ T8480] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 409.030011][ T9554] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 409.037977][ T8480] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 409.047932][ T8480] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 409.057783][ T8480] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 409.067639][ T8480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.082625][ T8480] usb 2-1: config 0 descriptor?? [ 409.104245][T15384] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 409.175218][ T8480] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 409.304018][ T9556] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 409.317178][ T9554] usb 4-1: Using ep0 maxpacket: 16 00:11:16 executing program 1: io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0), 0x8}) 00:11:16 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003028d97102705a1a440000102030109025c0002010000000904000001020d0000052406"], 0x0) 00:11:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c068, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xb688, 0x86081) preadv(r0, 0x0, 0x0, 0x0) [ 409.345864][ T8480] usb 2-1: USB disconnect, device number 4 00:11:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x11, 0x800000003, 0x0) socketpair(0xa, 0x6, 0x7, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) syz_genetlink_get_family_id$smc(0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 409.427161][T15502] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 409.504084][ T9554] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.514990][ T9556] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.531675][ T9556] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.536991][T15512] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 409.542322][ T9554] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 409.563058][ T9556] usb 1-1: Product: syz [ 409.568078][ T9556] usb 1-1: Manufacturer: syz [ 409.572984][ T9554] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 409.585586][ T9556] usb 1-1: SerialNumber: syz [ 409.591218][ T9554] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 409.626664][T15404] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 409.674964][ T9556] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 409.799787][ T8480] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 409.816238][ T9554] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.834386][ T9554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:11:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0x40045567, &(0x7f0000000740)) 00:11:16 executing program 0: 00:11:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 409.852923][ T9554] usb 4-1: Product: syz [ 409.859419][ T9554] usb 4-1: Manufacturer: syz [ 409.872070][ T9554] usb 4-1: SerialNumber: syz [ 409.885597][ T8921] usb 1-1: USB disconnect, device number 7 00:11:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c069, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) flistxattr(r1, &(0x7f0000000140)=""/238, 0xee) [ 409.954009][ T9554] usb 4-1: can't set config #1, error -71 [ 409.984776][ T9554] usb 4-1: USB disconnect, device number 4 [ 410.063980][ T8480] usb 6-1: Using ep0 maxpacket: 16 00:11:16 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0x540c, 0x0) 00:11:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0x4004556e, &(0x7f0000000740)) 00:11:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x2, [{0x2, &(0x7f0000000200)=@string={0x2}}, {0x64, &(0x7f0000000280)=ANY=[@ANYBLOB="6403a55f"]}]}) [ 410.109543][ T29] audit: type=1804 audit(1593389476.739:21): pid=15562 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir566597009/syzkaller.jmQ78X/208/file0/file0" dev="loop1" ino=29 res=1 [ 410.243955][ T8480] usb 6-1: unable to get BOS descriptor or descriptor too short [ 410.341328][ T8480] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.358854][ T8480] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 410.378660][ T8480] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.560564][ T8480] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 410.569915][ T8480] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.582280][ T8480] usb 6-1: Product: syz [ 410.594624][ T9556] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 410.617933][ T8480] usb 6-1: Manufacturer: syz [ 410.633154][ T8480] usb 6-1: SerialNumber: syz [ 410.694848][ T8480] cdc_ncm 6-1:1.0: bind() failure [ 410.897903][ T8921] usb 6-1: USB disconnect, device number 18 [ 411.053824][ T9556] usb 2-1: not running at top speed; connect to a high speed hub [ 411.133935][ T9556] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 411.147016][ T9556] usb 2-1: config 1 interface 0 has no altsetting 0 [ 411.205180][ T9556] usb 2-1: language id specifier not provided by device, defaulting to English [ 411.343889][ T9556] usb 2-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.40 [ 411.353015][ T9556] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.362015][ T9556] usb 2-1: Product: syz [ 411.366875][ T9556] usb 2-1: Manufacturer: 徥 [ 411.371476][ T9556] usb 2-1: SerialNumber: syz [ 411.415044][ T9556] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 411.616453][ T9556] usb 2-1: USB disconnect, device number 5 [ 411.673850][ T9554] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 411.923667][ T9554] usb 6-1: Using ep0 maxpacket: 16 [ 412.094683][ T9554] usb 6-1: unable to get BOS descriptor or descriptor too short [ 412.173917][ T9554] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.184424][ T9554] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 412.193508][ T9554] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 00:11:19 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003028d97102705a1a440000102030109025c0002010000000904000001020d0000052406"], 0x0) [ 412.363732][ T9554] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 412.373131][ T9554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.382545][ T9554] usb 6-1: Product: syz [ 412.387463][ T9554] usb 6-1: Manufacturer: syz [ 412.392087][ T9554] usb 6-1: SerialNumber: syz 00:11:19 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) 00:11:19 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x58}}, 0x0) 00:11:19 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0xc0, 0x0) 00:11:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c06a, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:19 executing program 4: syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x40}}]}}}]}}]}}, 0x0) [ 412.421717][ T9554] usb 6-1: can't set config #1, error -71 [ 412.452659][ T9554] usb 6-1: USB disconnect, device number 19 [ 412.501400][T15622] validate_nla: 2 callbacks suppressed [ 412.501409][T15622] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000017000101000000000000000004000000040010"], 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) r1 = io_uring_setup(0x869, &(0x7f0000000000)) dup2(r1, r0) [ 412.535368][ T29] audit: type=1804 audit(1593389479.169:22): pid=15628 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir566597009/syzkaller.jmQ78X/210/bus" dev="sda1" ino=16363 res=1 [ 412.689209][T15641] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x2f, 0x0, @private2, @dev, {[@srh={0x67}]}}}}}, 0x0) [ 412.803914][ T8921] usb 5-1: new full-speed USB device number 4 using dummy_hcd 00:11:19 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000090000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000"], 0x0) 00:11:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c06b, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 412.915291][ T9554] usb 6-1: new high-speed USB device number 20 using dummy_hcd 00:11:19 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0x5405, 0x0) [ 413.038939][T15669] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x10408, 0x0) [ 413.153787][ T9554] usb 6-1: Using ep0 maxpacket: 16 [ 413.180088][T15676] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 413.214575][ T8921] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 413.243747][ T9556] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 413.259553][T15679] FAT-fs (loop3): bogus number of reserved sectors [ 413.307125][T15679] FAT-fs (loop3): Can't find a valid FAT filesystem [ 413.313740][ T9554] usb 6-1: unable to get BOS descriptor or descriptor too short [ 413.329483][ T29] audit: type=1804 audit(1593389479.959:23): pid=15686 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir566597009/syzkaller.jmQ78X/210/bus" dev="sda1" ino=16363 res=1 [ 413.393920][ T9554] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.424161][ T9554] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 413.435849][ T9554] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 413.465019][ T29] audit: type=1804 audit(1593389480.019:24): pid=15688 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir566597009/syzkaller.jmQ78X/210/bus" dev="sda1" ino=16363 res=1 [ 413.495360][ T29] audit: type=1800 audit(1593389480.069:25): pid=15686 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16363 res=0 [ 413.520601][ T8921] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 413.531652][T15679] FAT-fs (loop3): bogus number of reserved sectors [ 413.539794][ T29] audit: type=1800 audit(1593389480.069:26): pid=15688 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16363 res=0 [ 413.554803][T15679] FAT-fs (loop3): Can't find a valid FAT filesystem [ 413.565952][ T8921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.589958][ T8921] usb 5-1: Product: syz [ 413.597361][ T8921] usb 5-1: Manufacturer: syz [ 413.602223][ T8921] usb 5-1: SerialNumber: syz [ 413.614235][ T9556] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.633521][ T9556] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 413.642424][ T9556] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 413.673677][ T9554] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 413.684502][ T9554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.692527][ T9554] usb 6-1: Product: syz [ 413.713669][ T9554] usb 6-1: Manufacturer: syz [ 413.718325][ T9554] usb 6-1: SerialNumber: syz [ 413.784650][ T9554] cdc_ncm 6-1:1.0: bind() failure [ 413.823673][ T9556] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 413.832739][ T9556] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.850689][ T9556] usb 1-1: Product: syz [ 413.855818][ T9556] usb 1-1: Manufacturer: syz [ 413.860419][ T9556] usb 1-1: SerialNumber: syz [ 413.884146][ T9554] usb 5-1: USB disconnect, device number 4 [ 413.934357][ T9556] hub 1-1:1.0: bad descriptor, ignoring hub [ 413.940380][ T9556] hub: probe of 1-1:1.0 failed with error -5 [ 413.954610][ T9556] cdc_ncm 1-1:1.0: bind() failure [ 414.040100][ T9402] usb 6-1: USB disconnect, device number 20 [ 414.253618][ T9554] usb 1-1: USB disconnect, device number 8 00:11:21 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003028d97102705a1a440000102030109025c0002010000000904000001020d0000052406"], 0x0) 00:11:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c06c, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:21 executing program 1: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r3, 0x100000003, 0x0, 0x28120001) lseek(r0, 0x7ffffc, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xfd14) fallocate(r0, 0x1, 0x0, 0x28120001) 00:11:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x4c68, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f0000000240)={[], [{@seclabel='seclabel'}]}) [ 414.608907][T15729] FAT-fs (loop3): bogus number of reserved sectors [ 414.618801][T15732] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 414.634238][T15729] FAT-fs (loop3): Can't find a valid FAT filesystem [ 414.663634][ T9402] usb 5-1: new full-speed USB device number 5 using dummy_hcd 00:11:21 executing program 3: open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) [ 414.770318][T15748] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 414.903553][ T9554] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 414.923814][ T9556] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 415.040030][ T9402] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 415.153461][ T9554] usb 6-1: Using ep0 maxpacket: 16 [ 415.213563][ T9402] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 415.222692][ T9402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.232571][ T9402] usb 5-1: Product: syz [ 415.238241][ T9402] usb 5-1: Manufacturer: syz [ 415.242915][ T9402] usb 5-1: SerialNumber: syz [ 415.313940][ T9554] usb 6-1: unable to get BOS descriptor or descriptor too short [ 415.343729][ T9556] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.353940][ T9556] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 415.362888][ T9556] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 415.413774][ T9554] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.424091][ T9554] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 415.432987][ T9554] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 00:11:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1, 0x10002) 00:11:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c06d, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:22 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$netlbl_mgmt(0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a4ec9"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYRESDEC, @ANYRES16], 0x0) [ 415.460690][ T9402] usb 5-1: USB disconnect, device number 5 [ 415.517357][T15772] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 415.579339][ T9556] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 415.596761][ T9556] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.614042][T15785] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 415.634255][ T9554] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 415.654096][ T9556] usb 1-1: Product: syz [ 415.664733][ T9554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.672754][ T9554] usb 6-1: Product: syz [ 415.683497][ T9556] usb 1-1: Manufacturer: syz [ 415.688133][ T9556] usb 1-1: SerialNumber: syz [ 415.700177][ T9554] usb 6-1: Manufacturer: syz [ 415.708241][ T9554] usb 6-1: SerialNumber: syz [ 415.744382][ T9556] hub 1-1:1.0: bad descriptor, ignoring hub [ 415.751100][ T9556] hub: probe of 1-1:1.0 failed with error -5 [ 415.764514][ T9554] cdc_ncm 6-1:1.0: bind() failure [ 415.779113][ T9556] cdc_ncm 1-1:1.0: bind() failure 00:11:22 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000700)='/dev/uinput\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000380)="e328e94dc8f26dcb8d6743a6170c4d62d7546cbf41346598d4940c466a0c1a7796bac5dccb04beb9e1d7b4aa48d2fdaf43212cfb2b25bd92d5af8363e72eb4995557b506046e2a65c8272e93da426c8dbb8e2407c46da36b76d87cf4b43c6fccd08eff47aed2a4f829e79a16a821eff7c31ae2b4e326bea19e6b5e88c5f35818b30c2f07c0693e9c5df4c730614af696fdaacf65ee225b5f794f9d7a07d04e08f64ce9883596472bb1a7072aaacad5760bbc6b233ec96bfad1daf72cfa0d2d0961d0022eac83", 0xc6}], 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="1400000000000000000000000100000006000000000000001c00000000000000000000000800000044a9a755058dfed42e9c00a8c3308fc78f280955a6cb", @ANYRES32, @ANYBLOB="640101020a0101000000000044000000000000000000000007000000070774030000018608000000020702940400009404454c07116221f94cbd869ddd97f6da4495b93e440cd703ac1e000100000fff000000001400000000000000000000000100000002000000000000001c000000000000000000000008000000", @ANYRES32=0x0], 0xb8}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000020543c08bb043009f952010203010902120001000000000904"], 0x0) 00:11:22 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000090000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000080905810340000000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 00:11:22 executing program 4: dup(0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 00:11:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c06e, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 415.893495][ T8480] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 415.979690][T15808] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 416.033667][ T9556] usb 1-1: USB disconnect, device number 9 [ 416.080215][ T9556] usb 6-1: USB disconnect, device number 21 [ 416.105428][T15828] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 416.144054][ T8480] usb 4-1: Using ep0 maxpacket: 8 [ 416.233486][ T9402] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 416.274177][ T8480] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 416.285516][ T8480] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 416.298337][ T8480] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1562, setting to 1024 [ 416.309868][ T9554] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 416.317826][ T8480] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 416.328033][ T8480] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 416.341100][ T8480] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 416.351042][ T8480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.359178][ T9107] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 416.386204][T15775] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 416.402608][T15775] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 416.414387][ T8480] hub 4-1:1.0: bad descriptor, ignoring hub [ 416.420400][ T8480] hub: probe of 4-1:1.0 failed with error -5 [ 416.573401][ T9554] usb 5-1: Using ep0 maxpacket: 8 00:11:23 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003028d97102705a1a440000102030109025c0002010000000904000001020d0000052406"], 0x0) 00:11:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c06f, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 416.603647][ T9402] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.624102][T15775] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 416.648381][T15775] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 416.663421][ T9107] usb 1-1: Using ep0 maxpacket: 8 [ 416.713891][ T9554] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.728901][ T9554] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 416.754171][ T9554] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 416.783414][ T9554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.795653][ T9402] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 416.809511][ T9402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.822221][ T9402] usb 2-1: Product: syz [ 416.829177][ T9402] usb 2-1: Manufacturer: syz [ 416.839216][ T9402] usb 2-1: SerialNumber: syz 00:11:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c070, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 416.895470][ T9402] hub 2-1:1.0: bad descriptor, ignoring hub [ 416.902078][ T9402] hub: probe of 2-1:1.0 failed with error -5 [ 416.908633][ T8480] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 416.958234][ T9555] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 416.987407][ T9107] usb 1-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice=52.f9 [ 417.007200][ T9107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.032090][ T9107] usb 1-1: Product: syz [ 417.041593][ T9107] usb 1-1: Manufacturer: syz [ 417.048640][ T9107] usb 1-1: SerialNumber: syz [ 417.068677][ T9107] usb 1-1: config 0 descriptor?? 00:11:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c071, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 417.213457][ T9555] usb 6-1: Using ep0 maxpacket: 16 [ 417.327431][ T9107] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 417.339156][ T9107] asix: probe of 1-1:0.0 failed with error -71 [ 417.354456][ T9107] usb 1-1: USB disconnect, device number 10 00:11:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c072, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 417.383503][ T9555] usb 6-1: unable to get BOS descriptor or descriptor too short [ 417.473655][ T9555] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.490651][ T9555] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 417.502505][ T9555] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 417.522945][T15918] validate_nla: 7 callbacks suppressed [ 417.522950][T15918] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 417.537650][T15775] usb 4-1: reset high-speed USB device number 5 using dummy_hcd 00:11:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c073, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 417.685237][T15924] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 417.694582][ T9555] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 417.708272][ T9555] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.718601][ T9555] usb 6-1: Product: syz [ 417.723094][ T9555] usb 6-1: Manufacturer: syz [ 417.729016][ T9555] usb 6-1: SerialNumber: syz [ 417.771940][T15933] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 417.782885][ T9555] cdc_ncm 6-1:1.0: bind() failure [ 417.803412][T15775] usb 4-1: Using ep0 maxpacket: 8 00:11:24 executing program 0: write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x1f) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 417.895307][ T29] audit: type=1804 audit(1593389484.520:27): pid=15943 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir844981768/syzkaller.6LHAWA/205/bus" dev="sda1" ino=16257 res=1 [ 417.945912][T15885] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 417.961160][T15885] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 418.033378][ C1] usblp0: nonzero read bulk status received: -71 [ 418.043471][ T9402] cdc_ncm 2-1:1.0: bind() failure [ 418.059736][ T9555] usb 6-1: USB disconnect, device number 22 [ 418.063419][ T9402] hub: probe of 2-1:1.1 failed with error -71 [ 418.123411][ T9402] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 418.144463][ T9402] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 418.204948][ T9402] usb 2-1: USB disconnect, device number 6 [ 418.207105][ T9107] usb 4-1: USB disconnect, device number 5 [ 418.254331][ T9107] usblp0: removed [ 418.692188][ T29] audit: type=1804 audit(1593389485.320:28): pid=15974 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir844981768/syzkaller.6LHAWA/205/bus" dev="sda1" ino=16257 res=1 [ 418.739096][ T29] audit: type=1804 audit(1593389485.350:29): pid=15975 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir844981768/syzkaller.6LHAWA/205/bus" dev="sda1" ino=16257 res=1 [ 418.793818][ T29] audit: type=1800 audit(1593389485.350:30): pid=15974 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16257 res=0 [ 418.814488][ T29] audit: type=1800 audit(1593389485.350:31): pid=15975 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16257 res=0 [ 418.818896][ T9107] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 419.013320][ T9555] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 419.032926][ T9402] usb 5-1: USB disconnect, device number 6 [ 419.253326][ T9107] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.303313][ T9555] usb 4-1: Using ep0 maxpacket: 8 [ 419.433519][ T9555] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 419.444842][ T9107] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 419.454032][ T9107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.462111][ T9107] usb 2-1: Product: syz [ 419.467948][ T9555] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 419.478652][ T9555] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1562, setting to 1024 [ 419.490512][ T9107] usb 2-1: Manufacturer: syz [ 419.496082][ T9107] usb 2-1: SerialNumber: syz [ 419.501771][ T9555] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 419.516516][ T9555] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 419.543414][ T9107] usb 2-1: can't set config #1, error -71 [ 419.568432][ T9107] usb 2-1: USB disconnect, device number 7 [ 419.584916][ T9555] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 00:11:26 executing program 5: 00:11:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c074, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:26 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}, [{{0x9, 0x5, 0x2, 0x3, 0x10}}]}}}]}}]}}, 0x0) 00:11:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, 0x0, 0xfdef) 00:11:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) [ 419.604876][ T9555] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.643256][ T9555] usb 4-1: can't set config #1, error -71 [ 419.690630][ T9555] usb 4-1: USB disconnect, device number 6 00:11:26 executing program 5: [ 419.766414][T16013] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:26 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x9, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) 00:11:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) [ 419.901196][T16035] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c075, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:26 executing program 5: 00:11:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) [ 420.003208][ T9554] usb 1-1: new high-speed USB device number 11 using dummy_hcd 00:11:26 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000090000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000008090581034000000000090401"], 0x0) 00:11:26 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff402000000a070c9", @ANYRES32=r3], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4001) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x5, 0x9, @udp='udp:syz0\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x6000040) splice(r0, 0x0, r2, 0x0, 0x84ffe1, 0x0) [ 420.150535][T16052] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 420.236861][T16062] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 420.253454][ T9554] usb 1-1: Using ep0 maxpacket: 32 [ 420.374005][ T9554] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 420.387164][ T9555] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 420.563214][ T9554] usb 1-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.40 [ 420.573225][ T9554] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.581477][ T9554] usb 1-1: Product: syz [ 420.587656][ T9554] usb 1-1: Manufacturer: syz [ 420.592764][ T9554] usb 1-1: SerialNumber: syz [ 420.634449][ T9554] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 420.766653][ T9555] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.786144][ T9555] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.836627][ T9402] usb 1-1: USB disconnect, device number 11 [ 420.963457][ T9555] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 420.972523][ T9555] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.981602][ T9555] usb 2-1: Product: syz [ 420.986474][ T9555] usb 2-1: Manufacturer: syz [ 420.991067][ T9555] usb 2-1: SerialNumber: syz [ 421.053897][ T9555] hub 2-1:1.0: bad descriptor, ignoring hub [ 421.059936][ T9555] hub: probe of 2-1:1.0 failed with error -5 [ 421.072395][ T9555] usb 2-1: selecting invalid altsetting 1 [ 421.263346][ T9555] cdc_ncm 2-1:1.0: bind() failure [ 421.279942][ T9555] hub 2-1:1.1: bad descriptor, ignoring hub [ 421.286330][ T9555] hub: probe of 2-1:1.1 failed with error -5 [ 421.334027][ T9555] usb 2-1: USB disconnect, device number 8 [ 421.613133][ T8921] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 421.863139][ T8921] usb 1-1: Using ep0 maxpacket: 32 [ 421.993574][ T8921] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 422.033021][ T8926] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 422.163088][ T8921] usb 1-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.40 [ 422.172710][ T8921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.181657][ T8921] usb 1-1: Product: syz [ 422.186498][ T8921] usb 1-1: Manufacturer: syz [ 422.191103][ T8921] usb 1-1: SerialNumber: syz [ 422.234011][ T8921] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 422.403093][ T8926] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.413314][ T8926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 00:11:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0x4004556a, &(0x7f0000000740)) 00:11:29 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 00:11:29 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c076, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f00000001c0)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xfde5, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xfdef) [ 422.443423][ T9554] usb 1-1: USB disconnect, device number 12 [ 422.531796][T16129] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 422.571141][T16130] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:11:29 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) splice(r0, 0x0, r2, 0x0, 0x84ffe1, 0x0) 00:11:29 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) bind(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) [ 422.583304][ T8926] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 422.602275][T16130] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 422.620397][ T8926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.622773][T16130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.649405][T16130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.653405][ T8926] usb 2-1: Product: syz [ 422.667626][ T8926] usb 2-1: Manufacturer: syz [ 422.670583][T16130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 422.684181][ T8926] usb 2-1: SerialNumber: syz [ 422.699019][T16130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 422.754502][ T8926] hub 2-1:1.0: bad descriptor, ignoring hub [ 422.760552][ T8926] hub: probe of 2-1:1.0 failed with error -5 [ 422.835010][ T8926] usb 2-1: selecting invalid altsetting 1 00:11:29 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) bind(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:29 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x60, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_RATE={0x6}, @qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x60}}, 0x0) [ 422.973380][ T8926] cdc_ncm 2-1:1.0: bind() failure [ 422.980478][ T8926] hub 2-1:1.1: bad descriptor, ignoring hub [ 423.010552][ T8926] hub: probe of 2-1:1.1 failed with error -5 00:11:29 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 423.064111][ T8926] usb 2-1: USB disconnect, device number 9 00:11:29 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) bind(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) [ 423.239750][T16153] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 423.312461][T16130] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 423.334816][T16130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 423.342619][T16130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:11:30 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x101182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="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", 0xfe, 0x24004084, 0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002e00) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:11:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000010000104000000000040000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004000128008000100767469003400028008000100", @ANYRES64=r2], 0x60}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}}, 0x0) 00:11:30 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c077, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:30 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000540)=0x40, 0x4000000000dc) [ 423.536325][T16192] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 423.582443][T16191] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 00:11:30 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000180)='./file0/file0\x00') [ 423.630114][T16209] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:30 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 00:11:30 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:30 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0x5410, 0x0) [ 423.763118][T16207] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 00:11:30 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x19, &(0x7f00000004c0)={0x5, 0xf, 0x19, 0x1, [@generic={0x14, 0x10, 0xa, "156f6fd72548f1b8a0bbd5bb649ef7b6a8"}]}}) 00:11:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c078, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 423.893457][T16222] overlayfs: maximum fs stacking depth exceeded [ 423.912613][T16225] overlayfs: maximum fs stacking depth exceeded 00:11:30 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x800000080004105) 00:11:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fadvise64(r0, 0x0, 0x0, 0x4) [ 424.009697][T16231] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:30 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:30 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000017000101000000000000000004000000040010"], 0x18}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x2044011) r1 = io_uring_setup(0x869, &(0x7f0000000000)) dup2(r1, r0) [ 424.142371][T16244] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:30 executing program 3: bind(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000340)='f2fs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000640)=[{0x0, 0x0, 0xcd9}], 0x0, 0x0) 00:11:30 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) [ 424.263068][ T8480] usb 2-1: new high-speed USB device number 10 using dummy_hcd 00:11:30 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) 00:11:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c079, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:31 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) [ 424.344111][T16262] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 424.371780][T16262] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 424.411395][T16262] F2FS-fs (loop3): Unable to read 2th superblock [ 424.452172][T16276] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 424.503055][ T8480] usb 2-1: Using ep0 maxpacket: 16 [ 424.538337][T16284] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 424.703344][ T8480] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.735010][ T8480] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.754712][ T8480] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 424.771437][ T8480] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 424.789259][ T8480] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 424.800118][ T9555] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 424.816409][ T8480] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 424.982988][ T8480] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 424.992217][ T8480] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.000639][ T8480] usb 2-1: Product: syz [ 425.004978][ T8480] usb 2-1: Manufacturer: syz [ 425.009578][ T8480] usb 2-1: SerialNumber: syz [ 425.093146][ T9555] usb 6-1: device descriptor read/64, error 18 [ 425.293203][ T8480] cdc_ncm 2-1:1.0: bind() failure [ 425.310676][ T8480] cdc_ncm 2-1:1.1: bind() failure [ 425.318774][ T8480] usb 2-1: USB disconnect, device number 10 [ 425.482991][ T9555] usb 6-1: device descriptor read/64, error 18 [ 425.762811][ T9555] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 426.022833][ T9107] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 426.034122][ T9555] usb 6-1: device descriptor read/64, error 18 [ 426.262878][ T9107] usb 2-1: Using ep0 maxpacket: 16 [ 426.423217][ T9555] usb 6-1: device descriptor read/64, error 18 [ 426.462890][ T9107] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.474386][ T9107] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.485848][ T9107] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 426.496566][ T9107] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 426.507178][ T9107] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 426.517781][ T9107] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 426.543038][ T9555] usb usb6-port1: attempt power cycle [ 426.683238][ T9107] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 426.692470][ T9107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.701660][ T9107] usb 2-1: Product: syz [ 426.706425][ T9107] usb 2-1: Manufacturer: syz [ 426.711119][ T9107] usb 2-1: SerialNumber: syz 00:11:33 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000807e9040450c426192fd000000010902", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 00:11:33 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000380)={@void, @void, @eth={@remote, @broadcast, @val={@void}, {@ipv4={0x800, @tcp={{0x25, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x27, 0x0, [@local, @loopback, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @rand_addr]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{}, {@multicast2}, {@broadcast}, {@multicast1}, {@multicast2}]}, @timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@remote}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0xba) 00:11:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c07a, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:33 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000fb, 0x0) [ 426.983114][ T9107] cdc_ncm 2-1:1.0: bind() failure 00:11:33 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) [ 427.005069][ T9107] cdc_ncm 2-1:1.1: bind() failure [ 427.025126][T16325] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 427.049420][ T9107] usb 2-1: USB disconnect, device number 11 00:11:33 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x0, 0x0}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000240)=@string={0x4, 0x3, "aedb"}}]}) 00:11:33 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) [ 427.252775][ T9555] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 427.322755][ T8090] usb 1-1: new high-speed USB device number 13 using dummy_hcd 00:11:34 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) [ 427.462957][ T9555] usb 6-1: device descriptor read/8, error -71 [ 427.631705][T16348] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 427.642992][ T9107] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 427.682944][ T9555] usb 6-1: device descriptor read/8, error -71 00:11:34 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) [ 427.733315][ T8090] usb 1-1: config index 0 descriptor too short (expected 12336, got 18) [ 427.756091][ T8090] usb 1-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 427.789833][ T8090] usb 1-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 427.816347][ T8090] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 427.836218][ T8090] usb 1-1: New USB device found, idVendor=0c45, idProduct=6142, bcdDevice=fd.92 [ 427.848476][ T8090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.908897][ T9107] usb 2-1: Using ep0 maxpacket: 32 [ 428.032950][ T9107] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 00:11:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c07b, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:34 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000010002, 0x0) [ 428.157606][T16382] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 428.173082][ T9555] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 428.241176][T16389] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 428.349008][ T9555] usb 6-1: device descriptor read/8, error -61 [ 428.414566][ T9107] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 428.423961][ T9107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.432097][ T9107] usb 2-1: Product: Т [ 428.482695][ T8090] usb 1-1: string descriptor 0 read error: -71 [ 428.493199][ T8090] usb 1-1: USB disconnect, device number 13 [ 428.632722][ T9555] usb 6-1: device descriptor read/8, error -61 [ 428.676589][ T8921] usb 2-1: USB disconnect, device number 12 [ 428.752985][ T9555] usb usb6-port1: unable to enumerate USB device [ 429.242762][ T9555] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 429.472695][ T9107] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 429.642637][ T9555] usb 1-1: config index 0 descriptor too short (expected 12336, got 18) [ 429.651133][ T9555] usb 1-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 429.661721][ T9555] usb 1-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 429.673212][ T9555] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 429.682414][ T9555] usb 1-1: New USB device found, idVendor=0c45, idProduct=6142, bcdDevice=fd.92 [ 429.692774][ T9555] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.747215][ T9107] usb 2-1: Using ep0 maxpacket: 32 [ 429.892734][ T9107] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 00:11:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/145, 0x91}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1, 0x0, 0xb}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)=""/23, 0x17}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xb}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r2, 0x0) open$dir(&(0x7f0000001240)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000340)="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", 0x2c8c) shutdown(r3, 0x0) 00:11:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/223, 0xdf}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xc}, 0x0) recvfrom$inet(r2, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r1, 0x0) r3 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) shutdown(r2, 0x0) 00:11:36 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000010002, 0x0) 00:11:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c07c, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 430.002617][ T9555] usb 1-1: string descriptor 0 read error: -71 [ 430.004452][ T9555] usb 1-1: USB disconnect, device number 14 00:11:36 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000010002, 0x0) [ 430.056644][T16431] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:36 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r3, 0x0, 0x20000000010002, 0x0) [ 430.144223][T16445] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/57, 0x39}, {0x0}, {0x0}], 0x3}, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000014c0)=""/102400, 0x19000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x100000000000000c}, 0x0) shutdown(r3, 0x0) 00:11:36 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r3, 0x0, 0x20000000010002, 0x0) [ 430.328585][ T9107] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 430.349615][ T9107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.382784][ T9107] usb 2-1: Product: Т [ 430.402744][ T9107] usb 2-1: can't set config #1, error -71 [ 430.411228][ T9107] usb 2-1: USB disconnect, device number 13 00:11:37 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) 00:11:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c07d, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:37 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r3, 0x0, 0x20000000010002, 0x0) [ 430.520427][T16477] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:37 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r2, 0x0, 0x20000000010002, 0x0) [ 430.636714][T16493] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/150, 0x96}], 0x1, 0x0, 0x6}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/33, 0x21}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/123, 0x7b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) shutdown(r3, 0x0) [ 430.952485][ T8921] usb 6-1: new high-speed USB device number 27 using dummy_hcd 00:11:37 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r2, 0x0, 0x20000000010002, 0x0) 00:11:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c07e, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/145, 0x91}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1, 0x0, 0xb}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)=""/23, 0x17}, {0x0}], 0x7}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r2, 0x0) open$dir(&(0x7f0000001240)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000340)="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", 0x2c8c) shutdown(r3, 0x0) [ 431.049210][T16515] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:37 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r2, 0x0, 0x20000000010002, 0x0) [ 431.139429][T16526] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)=""/4107, 0x100b}], 0x1}, 0x40002) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000080)=""/23, 0x17}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) shutdown(r3, 0x0) 00:11:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c07f, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 431.222478][ T8921] usb 6-1: device descriptor read/64, error 18 00:11:37 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r3, 0x0, 0x20000000010002, 0x0) [ 431.318192][T16545] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 431.615778][ T8921] usb 6-1: device descriptor read/64, error 18 [ 431.882466][ T8921] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 432.152423][ T8921] usb 6-1: device descriptor read/64, error 18 [ 432.542487][ T8921] usb 6-1: device descriptor read/64, error 18 [ 432.662585][ T8921] usb usb6-port1: attempt power cycle [ 433.382395][ T8921] usb 6-1: new high-speed USB device number 29 using dummy_hcd 00:11:40 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 00:11:40 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r3, 0x0, 0x20000000010002, 0x0) 00:11:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c080, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/150, 0x96}], 0x1, 0x0, 0x6}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/33, 0x21}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/123, 0x7b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) shutdown(r3, 0x0) 00:11:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/220, 0xdc}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000000)=""/221, 0xdd}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/183, 0xb7}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) shutdown(r3, 0x0) 00:11:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/145, 0x91}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1, 0x0, 0xb}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)=""/23, 0x17}, {0x0}, {0x0}, {0x0}], 0x9}, 0x2) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000340)="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", 0x2c8c) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r2, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r5, &(0x7f0000000340)="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", 0x2c8c) shutdown(r4, 0x0) [ 433.532468][ T8921] usb 6-1: device descriptor read/8, error -71 [ 433.586068][T16584] validate_nla: 1 callbacks suppressed [ 433.586077][T16584] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:40 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r3, 0x0, 0x20000000010002, 0x0) 00:11:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfeac) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x20000000010002, 0x0) [ 433.716949][T16605] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 433.748031][ T8921] usb 6-1: device descriptor read/8, error -71 00:11:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfeac) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x20000000010002, 0x0) 00:11:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c081, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfeac) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x20000000010002, 0x0) [ 433.940295][T16626] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:40 executing program 4: pipe(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfeac) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x20000000010002, 0x0) [ 434.039661][T16634] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 434.242428][ T8921] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 434.429699][ T8921] usb 6-1: device descriptor read/8, error -61 [ 434.702349][ T8921] usb 6-1: device descriptor read/8, error -61 [ 434.824601][ T8921] usb usb6-port1: unable to enumerate USB device 00:11:43 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 00:11:43 executing program 4: pipe(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfeac) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x20000000010002, 0x0) 00:11:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c082, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) shutdown(r3, 0x0) 00:11:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/145, 0x91}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1, 0x0, 0xb}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)=""/23, 0x17}, {0x0}, {0x0}], 0x7}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r2, 0x0) open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400001803c1, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000340)="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", 0x2c8c) shutdown(r3, 0x0) 00:11:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/57, 0x39}, {0x0}, {0x0}, {0x0}], 0x4}, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000014c0)=""/102400, 0x19000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x100000000000000c}, 0x0) shutdown(r3, 0x0) 00:11:43 executing program 4: pipe(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfeac) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x20000000010002, 0x0) [ 436.723714][T16670] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:43 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r3, 0x0, 0x20000000010002, 0x0) [ 436.814035][T16685] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:43 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r3, 0x0, 0x20000000010002, 0x0) 00:11:43 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r3, 0x0, 0x20000000010002, 0x0) 00:11:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c083, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:43 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r3, 0x0, 0x20000000010002, 0x0) [ 437.080313][T16709] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 437.088639][ T8921] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 437.167349][T16718] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 437.372254][ T8921] usb 6-1: device descriptor read/64, error 18 [ 437.772077][ T8921] usb 6-1: device descriptor read/64, error 18 [ 438.042090][ T8921] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 438.322095][ T8921] usb 6-1: device descriptor read/64, error 18 [ 438.722076][ T8921] usb 6-1: device descriptor read/64, error 18 [ 438.842391][ T8921] usb usb6-port1: attempt power cycle [ 439.333788][ T0] NOHZ: local_softirq_pending 08 [ 439.551994][ T8921] usb 6-1: new high-speed USB device number 33 using dummy_hcd 00:11:46 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 00:11:46 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r3, 0x0, 0x20000000010002, 0x0) 00:11:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c084, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:46 executing program 0: 00:11:46 executing program 3: 00:11:46 executing program 1: [ 439.717480][ T8921] usb 6-1: device descriptor read/8, error -71 00:11:46 executing program 0: 00:11:46 executing program 3: 00:11:46 executing program 1: [ 439.832873][T16747] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:46 executing program 3: 00:11:46 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r3, 0x0, 0x20000000010002, 0x0) 00:11:46 executing program 0: 00:11:46 executing program 3: [ 439.962180][ T8921] usb 6-1: device descriptor read/8, error -71 [ 439.996008][T16760] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 440.452036][ T8921] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 440.632244][ T8921] usb 6-1: device descriptor read/8, error -61 [ 440.902034][ T8921] usb 6-1: device descriptor read/8, error -61 [ 441.024268][ T8921] usb usb6-port1: unable to enumerate USB device 00:11:49 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003028d97102705a1a44000010203010902"], 0x0) 00:11:49 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:49 executing program 0: 00:11:49 executing program 3: 00:11:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c085, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:49 executing program 1: 00:11:49 executing program 3: 00:11:49 executing program 1: 00:11:49 executing program 0: [ 442.899983][T16785] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:49 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:49 executing program 1: 00:11:49 executing program 3: [ 443.033774][T16798] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c086, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 443.232197][ T9402] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 443.249709][T16811] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 443.326687][T16818] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 443.471770][ T9402] usb 6-1: Using ep0 maxpacket: 16 [ 443.631933][ T9402] usb 6-1: unable to get BOS descriptor or descriptor too short [ 443.712036][ T9402] usb 6-1: config 0 has no interfaces? [ 443.871994][ T9402] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 443.881080][ T9402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.893879][ T9402] usb 6-1: Product: syz [ 443.898083][ T9402] usb 6-1: Manufacturer: syz [ 443.904658][ T9402] usb 6-1: SerialNumber: syz [ 443.911264][ T9402] usb 6-1: config 0 descriptor?? [ 444.155627][ T9402] usb 6-1: USB disconnect, device number 35 00:11:51 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003028d97102705a1a44000010203010902"], 0x0) 00:11:51 executing program 0: 00:11:51 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:51 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x4}}]}, 0x30}}, 0x0) 00:11:51 executing program 3: r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 00:11:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c087, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 444.708692][T16846] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:51 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 00:11:51 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:51 executing program 3: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 00:11:51 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) r2 = dup(r0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) [ 444.850844][T16858] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 444.990429][ T29] audit: type=1804 audit(1593389511.621:32): pid=16872 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir566597009/syzkaller.jmQ78X/230/bus" dev="sda1" ino=16066 res=1 00:11:51 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c088, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 445.081759][ T9402] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 445.161998][T16884] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 445.270628][T16892] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 445.331905][ T9402] usb 6-1: Using ep0 maxpacket: 16 [ 445.492063][ T9402] usb 6-1: unable to get BOS descriptor or descriptor too short [ 445.572421][ T9402] usb 6-1: config 0 has no interfaces? [ 445.731972][ T9402] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 445.741226][ T9402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.750616][ T9402] usb 6-1: Product: syz [ 445.755623][ T9402] usb 6-1: Manufacturer: syz [ 445.760406][ T9402] usb 6-1: SerialNumber: syz [ 445.769349][ T9402] usb 6-1: config 0 descriptor?? [ 446.017611][ T9107] usb 6-1: USB disconnect, device number 36 00:11:53 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003028d97102705a1a44000010203010902"], 0x0) 00:11:53 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000001000000ff07000000fffffffd000800000000000000004000ffffff8500000000070000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 00:11:53 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411619fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {0x0}], 0x4, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 00:11:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:11:53 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c089, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), 0x10) 00:11:53 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="ff", 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) [ 446.619934][T16920] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:53 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) [ 446.693850][T16916] loop1: p1 < > p2 p3 < > p4 00:11:53 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="ff", 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) [ 446.715894][T16916] loop1: p2 size 1073741824 extends beyond EOD, truncated 00:11:53 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) [ 446.774025][T16946] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 446.981510][ T9555] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 447.271578][ T9555] usb 6-1: Using ep0 maxpacket: 16 [ 447.451615][ T9555] usb 6-1: unable to get BOS descriptor or descriptor too short [ 447.531703][ T9555] usb 6-1: config 0 has no interfaces? [ 447.741869][ T9555] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 447.750949][ T9555] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.759032][ T9555] usb 6-1: Product: syz [ 447.763291][ T9555] usb 6-1: Manufacturer: syz [ 447.767896][ T9555] usb 6-1: SerialNumber: syz [ 447.775571][ T9555] usb 6-1: config 0 descriptor?? [ 448.017856][ T8926] usb 6-1: USB disconnect, device number 37 00:11:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000100)="b805000000b94a0000000f01c10f00d4b93c0200000f320f0666b80a008ec00f09c4c125d5b370199ca9c7442400a4b9b4edc74424024ddf3ba1c7442406000000000f011c24b8010000000f01c1660f3881530f"}], 0x15555555555555d2, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}) ptrace$getenv(0x4201, r0, 0x2, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x4d0) 00:11:55 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="ff", 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) 00:11:55 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c08a, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:11:55 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003028d97102705a1a440000102030109025c000201000000090400"], 0x0) 00:11:55 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="ff", 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) 00:11:55 executing program 1: perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r0) [ 448.617285][T16999] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:55 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100), 0x0) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) [ 448.740907][T17013] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:55 executing program 0: r0 = timerfd_create(0x9, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) 00:11:55 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100), 0x0) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c08b, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27}, 0x24}}, 0x0) [ 448.961487][ T8921] usb 6-1: new high-speed USB device number 38 using dummy_hcd 00:11:55 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100), 0x0) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) [ 449.006521][T17033] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1048, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x9e, 0x1}, 0x0, 0x0, 0x80000000000001}, {{@in=@dev, 0x4d5, 0x32}, 0x2, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x1f4) 00:11:55 executing program 1: perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r0) [ 449.191718][T17048] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 449.221627][ T8921] usb 6-1: Using ep0 maxpacket: 16 [ 449.382298][ T8921] usb 6-1: unable to get BOS descriptor or descriptor too short [ 449.461984][ T8921] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.490453][ T8921] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 449.664542][ T8921] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 449.681444][ T8921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.689501][ T8921] usb 6-1: Product: syz [ 449.696318][ T8921] usb 6-1: Manufacturer: syz [ 449.700965][ T8921] usb 6-1: SerialNumber: syz [ 449.969212][ T9107] usb 6-1: USB disconnect, device number 38 00:11:57 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003028d97102705a1a440000102030109025c000201000000090400"], 0x0) 00:11:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27}, 0x24}}, 0x0) 00:11:57 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{0x0}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c08c, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:57 executing program 1: perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r0) 00:11:57 executing program 0: creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 450.573995][T17079] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 450.593741][T17080] fuse: Bad value for 'fd' 00:11:57 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{0x0}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27}, 0x24}}, 0x0) 00:11:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}]}, 0x3c}}, 0x0) 00:11:57 executing program 1: clone(0x199a4100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 450.720685][T17090] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000001240)={'syz', 0x3}) 00:11:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) [ 450.901412][ T9554] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 451.151298][ T9554] usb 6-1: Using ep0 maxpacket: 16 [ 451.311335][ T9554] usb 6-1: unable to get BOS descriptor or descriptor too short [ 451.391557][ T9554] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.401820][ T9554] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 451.561568][ T9554] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 451.570737][ T9554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.580764][ T9554] usb 6-1: Product: syz [ 451.587058][ T9554] usb 6-1: Manufacturer: syz [ 451.592327][ T9554] usb 6-1: SerialNumber: syz [ 451.834799][ T9554] usb 6-1: USB disconnect, device number 39 00:11:59 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003028d97102705a1a440000102030109025c000201000000090400"], 0x0) 00:11:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:11:59 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{0x0}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:59 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000004c0)=')', 0x1, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, 0xffffffffffffffff) 00:11:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000001240)={'syz', 0x3}) 00:11:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c08d, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:11:59 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x250, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) syz_open_procfs(0x0, &(0x7f0000272000)) 00:11:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:11:59 executing program 1: r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/31) [ 452.449826][T17142] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:11:59 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team_slave_1\x00', @link_local}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'\x00', @random="e292e38d0e6f"}) 00:11:59 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:11:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="8404000024000b0d00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00000000080001007462660058040200280001000600018040000018ffff00001f0230c5ff0f030000000000000400000001000046020000280001000400000007000200ff0700000002000f0000070000000000000000000f80"], 0x484}}, 0x0) [ 452.620500][T17159] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 452.791315][ T9107] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 453.041206][ T9107] usb 6-1: Using ep0 maxpacket: 16 [ 453.221285][ T9107] usb 6-1: unable to get BOS descriptor or descriptor too short [ 453.311418][ T9107] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.324834][ T9107] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 453.491740][ T9107] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 453.500912][ T9107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.509225][ T9107] usb 6-1: Product: syz [ 453.513872][ T9107] usb 6-1: Manufacturer: syz [ 453.518518][ T9107] usb 6-1: SerialNumber: syz [ 453.765108][ T8921] usb 6-1: USB disconnect, device number 40 00:12:00 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003028d97102705a1a440000102030109025c0002010000000904000001020d00"], 0x0) 00:12:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c08e, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 00:12:00 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:12:00 executing program 0: shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f00000002c0)=""/97) 00:12:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team_slave_1\x00', @link_local}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'\x00', @random="e292e38d0e6f"}) 00:12:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 00:12:01 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0xea60}}) [ 454.378708][T17202] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:01 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:12:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team_slave_1\x00', @link_local}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'\x00', @random="e292e38d0e6f"}) 00:12:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) [ 454.516473][T17215] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:01 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x0, 0x0) [ 454.701331][ T9107] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 454.941088][ T9107] usb 6-1: Using ep0 maxpacket: 16 [ 455.101117][ T9107] usb 6-1: unable to get BOS descriptor or descriptor too short [ 455.181300][ T9107] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.191699][ T9107] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 455.200689][ T9107] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.371281][ T9107] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 455.380331][ T9107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.392635][ T9107] usb 6-1: Product: syz [ 455.396812][ T9107] usb 6-1: Manufacturer: syz [ 455.403714][ T9107] usb 6-1: SerialNumber: syz [ 455.442116][ T9107] cdc_ncm 6-1:1.0: bind() failure [ 455.646903][ T9107] usb 6-1: USB disconnect, device number 41 00:12:02 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003028d97102705a1a440000102030109025c0002010000000904000001020d00"], 0x0) 00:12:02 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427", 0x9}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:12:02 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100), 0x10) listen(r1, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 00:12:02 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 00:12:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c08f, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:02 executing program 0: syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x0, 0x0, 0xc3, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0xaa030000, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x3b4, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xfa, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) 00:12:02 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 00:12:02 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427", 0x9}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) [ 456.260311][T17259] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 456.262295][T17258] xt_CT: You must specify a L4 protocol and not use inversions on it 00:12:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xfffeffff}], 0x0, 0x0) 00:12:03 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427", 0x9}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) [ 456.401545][T17272] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 00:12:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4, 0x2001, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab70, &(0x7f0000000100)=[{&(0x7f00000000c0)="0a02014d3804000019000300e6007d006c00007a000000000100000001000000004000000040000080000000", 0x2c}], 0x4801, 0x0) [ 456.551100][ T8921] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 456.791046][ T8921] usb 6-1: Using ep0 maxpacket: 16 [ 456.951083][ T8921] usb 6-1: unable to get BOS descriptor or descriptor too short [ 457.031634][ T8921] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.053960][ T8921] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 457.086886][ T8921] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 457.281266][ T8921] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 457.295043][ T8921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.312873][ T8921] usb 6-1: Product: syz [ 457.323149][ T8921] usb 6-1: Manufacturer: syz [ 457.334168][ T8921] usb 6-1: SerialNumber: syz [ 457.382099][ T8921] cdc_ncm 6-1:1.0: bind() failure [ 457.587845][ T9402] usb 6-1: USB disconnect, device number 42 00:12:04 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003028d97102705a1a440000102030109025c0002010000000904000001020d00"], 0x0) 00:12:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x0, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) [ 458.520887][ T9402] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 458.770952][ T9402] usb 6-1: Using ep0 maxpacket: 16 [ 458.938683][ T9402] usb 6-1: unable to get BOS descriptor or descriptor too short [ 459.031288][ T9402] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.048423][ T9402] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 459.058781][ T9402] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 00:12:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) 00:12:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c090, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:05 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c", 0xd}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:12:05 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) 00:12:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x0, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) [ 459.231252][ T9402] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 459.257382][ T9402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.262025][T17322] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000480)={0x0, 0x0}, 0x10) [ 459.284721][ T9402] usb 6-1: Product: syz [ 459.296773][ T9402] usb 6-1: Manufacturer: syz [ 459.324214][ T9402] usb 6-1: SerialNumber: syz 00:12:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x0, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:06 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) 00:12:06 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c", 0xd}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) [ 459.383044][ T9402] cdc_ncm 6-1:1.0: bind() failure [ 459.422293][T17340] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000200), 0xffffff77) recvmsg$can_bcm(r2, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000780)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) [ 459.585828][ T9107] usb 6-1: USB disconnect, device number 43 00:12:06 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003028d97102705a1a440000102030109025c0002010000000904000001020d000005"], 0x0) 00:12:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c091, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:06 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c", 0xd}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:12:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000140)="29000000140003b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) read(r0, &(0x7f0000000000)=""/239, 0xd8) 00:12:06 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c", 0xf}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) [ 460.195331][T17381] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000140)="29000000140003b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) read(r0, &(0x7f0000000000)=""/239, 0xd8) 00:12:06 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c", 0xf}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:12:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:07 executing program 1: mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ff2000/0xe000)=nil, 0xe000) [ 460.323459][T17398] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c092, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 460.490814][ T9554] usb 6-1: new high-speed USB device number 44 using dummy_hcd 00:12:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000200), 0xffffff77) recvmsg$can_bcm(r2, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000780)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) [ 460.539531][T17420] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 460.628605][T17429] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 460.740776][ T9554] usb 6-1: Using ep0 maxpacket: 16 [ 460.900829][ T9554] usb 6-1: unable to get BOS descriptor or descriptor too short [ 460.981316][ T9554] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.991666][ T9554] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 461.000556][ T9554] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 461.171085][ T9554] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 461.180154][ T9554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.189191][ T9554] usb 6-1: Product: syz [ 461.193958][ T9554] usb 6-1: Manufacturer: syz [ 461.198552][ T9554] usb 6-1: SerialNumber: syz [ 461.241910][ T9554] cdc_ncm 6-1:1.0: skipping garbage [ 461.247191][ T9554] cdc_ncm 6-1:1.0: bind() failure [ 461.448278][ T9554] usb 6-1: USB disconnect, device number 44 00:12:08 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217", 0x42}, {&(0x7f0000001b40)="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", 0x1c7}], 0x2, &(0x7f0000002000)=ANY=[@ANYBLOB="c00000000000000002010000ff0300006c0219ac763abe89a0819c297c96b4e9465cb508773c19db654549b22f1f022aa737e4243e379ce5d3678a4fa0aef52cdcee6f63587e53afa0195d30beb0658d2b263728fa257aa437c7bdc19188e5c786c59456f52e18bb3e0f7bcd7bd356de5348fa0e8aa89a6e8aa71ea9f9d2258683d16f5bc2b1e42c15002354f4f73a116ce7519f1587d38bb5636d008dd91f9b3888cb41d8d939abbb371a28aae6a12cec4047f6caea905e11381898d7bc000070000000000000001601000000000100991e01cfe51ddd933fb59ed0e73e5d72825a7749b60fa32365b9f026da13543f5c5ba2c2b01a5cabf747b9936b3801bffc3ce6620b55c192a2b164ad585d4f4991a91a3994106cac8a98fa99678b8e454a0f12438bc57344acf5205fad000000e0"], 0x210}}], 0x1, 0x0) 00:12:08 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c", 0xf}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:12:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c093, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="11840209900608233e496d5671dc71ff04291b2c1501772502bb867063f70647862a15257781bcf1d1e498104d082833914ee68afc14ac7cb85975751b8c31271948ee303aa2a34be964b8c1b95638607b2e7ec7fda28fea4caada028a39bf259538214e80b9b5c9b58b1cb36a933d64a25324566f7733ea93fc91c98fec268cb1e2148198e2ccf2463d2ae56c61ac436c336b2d421c6b512a600955c6ede3e5820165eabf2dda9e2294300485327a6d28f7913f19d79e5f478626bb6a607c2f5085c68749edc417da6cc4db8c605215575067836f62b0b3e0b49e8c321240c1b1b54babad07a7000c4eb99200b9d016f1554683b7b3323ab37f066b973d584345792feba5b719ec0413d1c37689ce927de538b4ac16687f6595120220e5205f79227e43a8eaa610c8c232bcb811b4a63eab1b87da214700408e830774dcd6318bec9ef28b9171b0492bddb09009a8d26f797713d81548e0c547b8aa7bcd844c2cfa69560deaa6188b576792cccdc09a1f94da4e4c4f05e4d053d6a2fcdb253dce696d6cd85a1aee740c2a84e3d63aa558d3db42531e2303c6e8cfc0b6e31950fcbf3021f708d47c05edcf3fcdd66226d99f1f132d73f698e0820c395f343e0d69042b6b06bf40b45ea6a8f52a32255f3c40d4e9fb93084421a6235116be29125e5afe2d8c418cedb2548db2fcade80c118af8a6be1e650517519721a5920f842662aad37473f2ba60f7ee8466f8dba829c3e17d3e618ef5768b1b0a8991c64f2e592e726bb4636d13fbd04ed71b031e1c1a27fe30325e521a9845ef1abae620cefb216c47a1e3b4db8cb1287006b9fed827fa5a944b8045a3397ba4208c5cb67117393b2f836e4e79196e05ebd7488fa76619ea0521982b9cb76a63bed4f0ffe48ceb4b2bbe4e590dec80eca4740027f855dad06313a2a0188932a2069fc70b8af0e4294a7b51b552ad72ccd5625fd2a971354bad2930eec5f41e0ae271224b8a9160d96965d372c65e4a0adcee1e8bb84406b6a5c5e4d6ed7ff529afdffcdbea58f43e7c39f8aa9845fc92c84aa8bc0eef238d19b2cd3dd0c6d52694c99f2f493b7064076b62d139837eda3d11e43ae52fb771c1585974bcc6e2adb24096fd3d5ac867afb9cfb6ed07cb34e227f00ed5541499d2e7e3b4f3da831a3b9c32de8be0f5b45e8248b5a2811bb452ca6dc7d56d87531347ad316e6e8c6bf887f70f455cdeae8dcfff004b0ed1b8fd63d1d5e55cbdf1541b87821f3c90f7d47e542ec75b132f5285862d3e9fd84f841e4d137e2735d5f23c87108bcaa591a14ab2ab43802ffb176453312420fe0e79af7236850104bc3e925b16fd0a57ee9959ae8ccc13c843365442bb462d86ead8a20c41e064e0ad286f4aa4c69d0046e5012cecf425b0df11c0b458e31804d8ffe98554afc69b475ca03cbe926806b276e19aa47b3e101b95ee2fd32b9f06a3fcf6f078ce694f9ed8fe03425446bcdd0e7c1f4d3e109bbe30020cb81b64bb0cdfd8a0d33e1143c4fbb7fef15d1059e1f20b394f69d482a1da5fd49508808c80c824a843698386b4d3c3885f063aa3c047624f93298040fbc706020d295cf3f363d42f21d327d91d101cc4758c67195a49c3b3002e14cf28a5b8899b7ef08b6713d89c7049ef594361b1d8a0c5838ff30a6a3f1b0f9f947c76d5f1629d3df215975b498bd33ddbc44798a9f76ba0c41e9ad565e44ebf3c333fade1d4306b1042c5e2e855f3e5fdcd64ce7fdf73b09044bec8a2f0cecbb00c6c76c85891478aa4bae6282541cff613f2b461cce115ba0b78c6f50f4593efe5c2ae558f6c0534db14d5b44416b08abe45c6ddf5c749aae8141e427a0a2f42b903ac71caa09e5098cc2c07d79145c7408415d8f937108d6becdbb38a2b3250c0fdf36297375aa3212c9bc8483e8d629c54a79ca55cdda720496753f27fd9e88e203594c1e28514e0d22b9c34c3e1f10253217abed40b09a533fad16c7b9b8e89d7dfd3b27d579bfc813ad2895543ada10f886c7c75010bc70345b727513fa3b7c6aa677a22e037e2bd7731148996f3a8c424075fd12aa8eb9d8f6a8fe7b2eb68934799f5063c58c1816caa4b400bb0914fc7300111c063e5c01910b0b01803a1a348f387542236d82bef6d926ba571ca0e7745e586eddf2334baeafd7b1149502e781ec45299c3f3cd34c3628057def3c012878123224e33828b216022dfebdc6a284e503868a1e4369af819fcfd4124d801386dbb123ce88d54712f6351c77aad6039b2f5ff3d0d1903c74043864fa9f801847ac8446280a31739e0215bce77c08c2477e9079f62225cf179da445e9f220560d995238f17e87dd4ce0f7ebe5f8941d5d130c2d6398e08bb893b5dd8e58701e41e75fd0182d3ebac8920aad7f4777b4e096eb5c5a17e440c0a5b95ca92bbaec63130bbc41d0cbfccb03eb6c1cffc8558bd255c2096a285346dd9600f33554acf62aef19d2776bd5d8a5a9f0a4976022b8ac1400e3f0a7fa227ebc0ad80187939562492154c708739f865a9803512a6213d5026b1febd0a20ce4b3a4d7d90dc5af3f5beaa06b8af1d19556655ac578f9266f5d3b393f24a2d112eee90f749e1f0a6e27ff2469f1cc21d5bcbf355168c62044fd1cc4861544a8175f640ad3c5bb6c81efa331822efb70b57f4110deebe68794211ee4a95c259b4eb519d887b6cfdee178758382f4f63c80b1f0b9f2337dd5a11a5b1fb04c3315ff942cf7f5d7da36c088a65f86529d003c8c9bf74392f9d897b53a422cb3b3f9e09f9936514ac100fecf3c9a573aae041ce3c86cce6dc2884053bc56a510791392bda454aa7dc580a3a7cf71c18dd57bec21c0eb143deb654d8b0fc642bbc7484dc9943c2102169a6aca278f0fd81b1b6b082b355443c8198284e3b01e9fff1c8df1895e9c9593f16438c7f737f2ab56c0f57eadfcd570c5b04b5218fc7d2c0cdca5c7ba5ff428b4fe541d4c8f6fe274d2a3290343f3d6944c918571e350caf2ec3cc9601cd5b71e8f22ff401024c51c592bf476f255b200962e2ed014ce551376235e8d220763f8c9c904570d6b6227c94d62e08b0c9bd3557b96c8ed227685fc54d43e4a05ca5996c4d8e3e5076f394b0c0bc7cdf972f996c45987ffb2d6a138a1772b7ffbeaa66ceddd34839051c61f9d87153f23823f9178b56eb016524ba862cdca9d147b5bda79553ade825d5a1b8ea3acf8c7cad88cd11b68625d367931b9a0296b228fd2c52da32d050d746942fb38dbb3d5e2ad75b7243f7340a8c0d4c7b156e030b6eb154ec6c47c1b6af307ea0e8916e21166572632321f8b4978ecd1f8b4029a6baba4da2dd984d245d1b6dd4a6f2a72acc4d90f480de489826130dd7b2a9ad79938ed6de65c7a56e0515d84302a8a8ee98c20ea32db20b231b9d00e03dd74b804e15c70ce8a6b169ffa79db7e24062b2dd3560502337bb03c8506a25ce77eaa06f9fb54aff0bab9545c32bb9a35a700361f46a3995ef929af7698bf16df9d8965f4d939f5dba6eb238c1089c25617568b29760ecbfef273b8070c3853a652d30da91cb00e0afa1c663589158711984cfe38869974c30e9b51333091cb0f5d72f5ddb0f3bc550b2787ff6fdfe0b90764f8ec319a2674d6e16ca2417b7a2144b5a4ad248fc4b2b8f74ed1957bd4f52f0db0ac4eb8f6dc62c51e16a803bff507359abdbd0ce1ee0fb936a4a060954c1a939b4b197b61311d079ef09e57e60f94fd796c12cf7e62e11bbdc11e04fc79736e42d6d2dcb02e705dc4e8e17addcc0902af4ebbf0a2f57db53cbe99bb0797137c903195de282ed02c37634181936e351f383fb590eb453e539b80c6935185ac40890c1ba70b5e2eb53235f3a983ce4608929d2609354f89fc22f80a0aa9fc0ea9af7f06e46d8b5f5d47dbd2efe1f2d0f4edee09f11b57c257ff5ecfe96ada3c5f37e1d766c5c85490d14f297e1ce65ae34909f04492e7cc955faabb205491a096147d0930ffa70b68055523e360328f26f28ff160cdb8b4785a22110191c9ecfd187267c1a4300e9370a41c73fe224f3a9c54493780b1a4ff96398f0a60f66e48ef4ad7183f71c0c4d6d9d1a57e19a56d9ed426cd4143de82ceb33011988ed079b52ab30300255e066a84959a10676c7b58515ff9bed194c784072af1062734f5d497f2be9b0ea1228f5a981e8d5d78da49da90b040d4e3a93b7f71360b25cf75fca36a4068748e1bc171dd40fa31d6f9c4c926a635f4ea4faf7511146bc5782606966aaab13a30d67cf182751149f678852da30d0f9b6ea5524a1f5ea01e77d7a74ac588ab2251cdbc9f4f8aa2cf367f0ad2178e66fbd7ab447aae12a7bc6cf3925fe99dcdf8ec95cf4576520b781dc12fe6d310978315d2e3d7dbc49c9be2fa40788ebd5fc02c6c7f566a64b7f4af7a96353265dc9e4c74c909b9a385966f4d7312fdcdfa8f5d0632c6db4a19ce696416a04e937d4a994e757eae59c07e5d3228254b35003eba32ed448516e9aa77b5b92c9ce7fff06a8f4f652d27971a46c621a6b2ee3c1adaf60d5cdfb381a4e4ac9ab7d7d72fcb2d6aa7e104255345f1e15dec8299c9c75735a01338d20f72d8b359803becef76d9ca6da029d0a795e6d4a652bf3880efeee074c81774b2971da03eff6d9516ac8a0c34b686aa1afbcb2befc79618a3dbb2bcd53da0075cdba0ddd975fd4e833291005f0fbf7b167922dc85b109e1381431e0fdc50f80b8592edd57f50f9dd950205e1a21cd3026cb30abe6d06dbec6c7cdb76d90c0e85a69aa1522281bcb3f4fc54ee443e76c7d9bf82e313f2dc3e277c699e079a847635780a5b724aca0ede72febba648de12fd14e3a78b29e9df82a19f4ed9c712e5b313c05e6908f6d4601d076afda5cf77eab4ea7c44c9d40f463fe8cde79f18170de9b087b113cfc7d467bd164564c2a8a99e4566d6f9eb1a8d5393700158fe84c109735cfe0ab45d9eb6fe61619d8538512730e015ffac07279973126e9087b209144c8797dd6b65381e616256a9cbf7771222c41618eb82d3539e7750ef0614acb4c901f88f31589d9d6d87c4b2a5361ad44155bf5476f2bc42cd2e758d478a1bcaf27c6c5607f025c8ff75913cb95eb631a690e3e6201204e616a4482a6eae323dadc0a9c22a7de1567ec3f45380bbde304cc76efd4bb0ac9f28475534eb973fc02f3f5dc73a862052f82f6d40c0821012589925ce3f2274ff2a8097b8464b44068c1505b967679bcc6b5d7e7ece9bd1880fc32531fe5d7bac9c5262a709239e477ecf44915a70aa7f984ec1bed047f3ec92a55714403c7c7503a3ac87cec792e072eefa623c56b6b33beb5ae7f5066a952cf6b0b25ab74841e5d2a9b20b1fe0cd83c3aae37eac0dd08d6a65410af956767766f2c6c12d13e87f363052e1e645c2dccd42948be835a9fe1c8892453b73cbcaa7c9222ccece11f86fba52d29d64a609da597e226e5f59e9a8301297c1e9881557a860df15ee14cf4bf70988e2cf90359587bc378adba5aa610db3cc1d6ae5fba9390b4c", 0x5}, {&(0x7f0000000840)='\x00', 0xc9ed}], 0x2, 0x0, 0x0, 0x1a0}, 0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00'}, 0x25) 00:12:08 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003028d97102705a1a440000102030109025c0002010000000904000001020d000005"], 0x0) [ 462.021108][T17459] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:08 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') 00:12:08 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:12:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:08 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) getcwd(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 462.182342][T17478] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c094, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:09 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:12:09 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r6, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r6) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000200)={0x100500, r6, 0x19}) 00:12:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:09 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xffffffffffffffcc) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000500)) sync() [ 462.390962][ T8926] usb 6-1: new high-speed USB device number 45 using dummy_hcd 00:12:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, 0x0, 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) [ 462.486546][T17500] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 462.576398][T17511] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 462.625580][ T29] audit: type=1804 audit(1593389529.252:33): pid=17514 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir566597009/syzkaller.jmQ78X/251/bus" dev="sda1" ino=15754 res=1 [ 462.660843][ T8926] usb 6-1: Using ep0 maxpacket: 16 [ 462.695778][ T29] audit: type=1804 audit(1593389529.272:34): pid=17510 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir566597009/syzkaller.jmQ78X/251/bus" dev="sda1" ino=15754 res=1 [ 462.788479][ T29] audit: type=1804 audit(1593389529.352:35): pid=17510 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir566597009/syzkaller.jmQ78X/251/bus" dev="sda1" ino=15754 res=1 [ 462.824069][ T29] audit: type=1804 audit(1593389529.382:36): pid=17510 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir566597009/syzkaller.jmQ78X/251/bus" dev="sda1" ino=15754 res=1 [ 462.857243][ T29] audit: type=1804 audit(1593389529.452:37): pid=17510 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir566597009/syzkaller.jmQ78X/251/bus" dev="sda1" ino=15754 res=1 [ 462.882348][ T8926] usb 6-1: unable to get BOS descriptor or descriptor too short [ 462.887777][ T29] audit: type=1800 audit(1593389529.452:38): pid=17510 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15754 res=0 [ 462.992649][ T8926] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.009784][ T8926] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 463.022267][ T8926] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 463.240750][ T8926] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 463.249902][ T8926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.258409][ T8926] usb 6-1: Product: syz [ 463.263124][ T8926] usb 6-1: Manufacturer: syz [ 463.267785][ T8926] usb 6-1: SerialNumber: syz [ 463.315919][ T8926] cdc_ncm 6-1:1.0: skipping garbage [ 463.321645][ T8926] cdc_ncm 6-1:1.0: bind() failure [ 463.514409][ T8926] usb 6-1: USB disconnect, device number 45 00:12:10 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003028d97102705a1a440000102030109025c0002010000000904000001020d000005"], 0x0) 00:12:10 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:12:10 executing program 0: r0 = socket(0x1e, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f02"], 0x14f) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f00000002c0)={0x76f8, 0x0, 0x3021, 0x0, 0x0, 0x0, 0x2}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000800)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000100)) recvmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001600)=""/4096, 0x1c80}], 0x1}, 0x40012100) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[], 0xfffffd6d) 00:12:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, 0x0, 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c095, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:10 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aaff02000000000000000000000004000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100f500f2ffff02624fed5cf410c5fe00000033"], 0xf8}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4, 0x0) 00:12:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, 0x0, 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:10 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aaff02000000000000000000000004000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100f500f2ffff02624fed5cf410c5fe00000033"], 0xf8}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4, 0x0) [ 464.097216][T17550] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:10 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) [ 464.202787][T17564] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c096, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:11 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$inet_sctp(0x2, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x0) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x88}}, 0x810) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 464.380940][ T9402] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 464.506764][T17579] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 464.605684][T17581] bridge0: port 3(vlan3) entered blocking state [ 464.622525][T17581] bridge0: port 3(vlan3) entered disabled state [ 464.630895][ T9402] usb 6-1: Using ep0 maxpacket: 16 [ 464.698161][T17593] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 464.779931][T17581] bridge0: port 3(vlan3) entered blocking state [ 464.790720][ T9402] usb 6-1: unable to get BOS descriptor or descriptor too short [ 464.807136][T17581] bridge0: port 3(vlan3) entered disabled state [ 464.870770][ T9402] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.901753][ T9402] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 464.920696][ T9402] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 465.110689][ T9402] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 465.119779][ T9402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.129004][ T9402] usb 6-1: Product: syz [ 465.133850][ T9402] usb 6-1: Manufacturer: syz [ 465.138479][ T9402] usb 6-1: SerialNumber: syz [ 465.181610][ T9402] cdc_ncm 6-1:1.0: skipping garbage [ 465.186889][ T9402] cdc_ncm 6-1:1.0: bind() failure [ 465.385946][ T9107] usb 6-1: USB disconnect, device number 46 00:12:12 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003028d97102705a1a440000102030109025c0002010000000904000001020d00000524"], 0x0) 00:12:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:12 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:12:12 executing program 0: r0 = socket(0x1e, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f02"], 0x14f) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f00000002c0)={0x76f8, 0x0, 0x3021, 0x0, 0x0, 0x0, 0x2}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000800)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000100)) recvmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001600)=""/4096, 0x1c80}], 0x1}, 0x40012100) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[], 0xfffffd6d) 00:12:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c097, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000004200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:12:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) [ 465.970945][T17629] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) [ 466.017638][T17634] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:12:12 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:12:12 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xcb) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') writev(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f00000003c0)="1fd9676d3cccf1bae37f840f83aac6b55d7767d8ac956ed5fb087ff4620ca919496edc04864bd1a288cf98598751f7d3bff571a643675b08bbaeab8e3bba34de51a685aec87d75b9c87b3f182189bee11f71a199011a2486dc25c35489028e86e980d0e339163bc7675a9221870825c6c4db4a6320029f04c96c13e647b3c46c931f6616139961135b5bcc", 0x8b}, {&(0x7f0000000b00)="0fbb3aed9c26491f69ccd39ee009cda4878639faed5de247931250060a2a4e03427501bb091ad0552df71505236db95c409209e33d1dc76826483b109117efbe8b6633a74f1d51404026448be9cc11383ccfc9319cd0cc69a1e6e8cdaa293aac3a7da4e836266c34ac74207c56d7aaaf590b62ce6d9b97da86039d366ed6d438d675151b3635bb1aa1b62bbac220ffd091c76302e816b72a0a28aaf1365bd5b89ea98beed0bb17fa634d8285c308c931b48957bc", 0xb4}, {&(0x7f0000000bc0)="350f011c7f9ad6c2fd3b49bcde5b69b0c012339eac1ac43c3fb58298d220e41af50e99b63782de62fc3ebab238bfd0a4435942748be43e4471a6b6983e990df5e4dd14d9c410537f171655cf8eb33006e71277e8f255afe0bd4c1edc20cf679a4a5d12de84cdeb8c54457330498dfff88df1608f00ded4e087d9518cd617d82a6a2065eb1172367585ed7854f1319c8541143403c27fd7fa18ffcbfcab0bd9ca344fc520bb358ace467a686dc79934c0ea005e24ceb27416813bae84245c998aa790512dcd187fc428534123b67705b2b762b85ccd1fd8", 0xd7}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="085e5cf314920340e06194105a197a08f293fde3f57e770093cf8531834bd3bc66ac03b45049cadd0f11980de3e053bb176ea5e79cdc869d09290a412ece46056a58e1797512f53de68a8e6b7735e9b2c80db446654b7a2c433936b7efa35e4b628d2bb39f800630a2c75b245bdb7c94b036f599e61ac205fad6541fd76b0b685ecfaa5e82aa931eb8bf9d77e0d0bb0d2f05552a5c2afc", 0x97}, {&(0x7f0000001d80)="b0de2af19a42d682c32a7605299e64cae613592062b2fb327f2772b964d6dfe931b5a1d6808a8b6850b1793e97170d93d1df97d0534edd3a24d5e2e1fd0c486d6e528d69a4be253f0c9c26128b6669017100b944c7de57", 0x57}, {&(0x7f0000001e00)="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", 0xfe}], 0x7) [ 466.129734][T17644] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:12 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) [ 466.301759][ T9107] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 466.424427][T17661] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 466.555327][ T9107] usb 6-1: Using ep0 maxpacket: 16 [ 466.720485][ T9107] usb 6-1: unable to get BOS descriptor or descriptor too short [ 466.800763][ T9107] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.811025][ T9107] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 466.820104][ T9107] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 466.991085][ T9107] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 467.000163][ T9107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.009547][ T9107] usb 6-1: Product: syz [ 467.014661][ T9107] usb 6-1: Manufacturer: syz [ 467.019271][ T9107] usb 6-1: SerialNumber: syz [ 467.071491][ T9107] cdc_ncm 6-1:1.0: bind() failure [ 467.287023][ T9554] usb 6-1: USB disconnect, device number 47 00:12:14 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003028d97102705a1a440000102030109025c0002010000000904000001020d00000524"], 0x0) 00:12:14 executing program 0: r0 = socket(0x1e, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f02"], 0x14f) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f00000002c0)={0x76f8, 0x0, 0x3021, 0x0, 0x0, 0x0, 0x2}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000800)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000100)) recvmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001600)=""/4096, 0x1c80}], 0x1}, 0x40012100) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[], 0xfffffd6d) 00:12:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c098, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:14 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xcb) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') writev(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f00000003c0)="1fd9676d3cccf1bae37f840f83aac6b55d7767d8ac956ed5fb087ff4620ca919496edc04864bd1a288cf98598751f7d3bff571a643675b08bbaeab8e3bba34de51a685aec87d75b9c87b3f182189bee11f71a199011a2486dc25c35489028e86e980d0e339163bc7675a9221870825c6c4db4a6320029f04c96c13e647b3c46c931f6616139961135b5bcc", 0x8b}, {&(0x7f0000000b00)="0fbb3aed9c26491f69ccd39ee009cda4878639faed5de247931250060a2a4e03427501bb091ad0552df71505236db95c409209e33d1dc76826483b109117efbe8b6633a74f1d51404026448be9cc11383ccfc9319cd0cc69a1e6e8cdaa293aac3a7da4e836266c34ac74207c56d7aaaf590b62ce6d9b97da86039d366ed6d438d675151b3635bb1aa1b62bbac220ffd091c76302e816b72a0a28aaf1365bd5b89ea98beed0bb17fa634d8285c308c931b48957bc", 0xb4}, {&(0x7f0000000bc0)="350f011c7f9ad6c2fd3b49bcde5b69b0c012339eac1ac43c3fb58298d220e41af50e99b63782de62fc3ebab238bfd0a4435942748be43e4471a6b6983e990df5e4dd14d9c410537f171655cf8eb33006e71277e8f255afe0bd4c1edc20cf679a4a5d12de84cdeb8c54457330498dfff88df1608f00ded4e087d9518cd617d82a6a2065eb1172367585ed7854f1319c8541143403c27fd7fa18ffcbfcab0bd9ca344fc520bb358ace467a686dc79934c0ea005e24ceb27416813bae84245c998aa790512dcd187fc428534123b67705b2b762b85ccd1fd8", 0xd7}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="085e5cf314920340e06194105a197a08f293fde3f57e770093cf8531834bd3bc66ac03b45049cadd0f11980de3e053bb176ea5e79cdc869d09290a412ece46056a58e1797512f53de68a8e6b7735e9b2c80db446654b7a2c433936b7efa35e4b628d2bb39f800630a2c75b245bdb7c94b036f599e61ac205fad6541fd76b0b685ecfaa5e82aa931eb8bf9d77e0d0bb0d2f05552a5c2afc", 0x97}, {&(0x7f0000001d80)="b0de2af19a42d682c32a7605299e64cae613592062b2fb327f2772b964d6dfe931b5a1d6808a8b6850b1793e97170d93d1df97d0534edd3a24d5e2e1fd0c486d6e528d69a4be253f0c9c26128b6669017100b944c7de57", 0x57}, {&(0x7f0000001e00)="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", 0xfe}], 0x7) 00:12:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:14 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) [ 467.842684][T17684] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:14 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x408c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4180}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') [ 467.917449][T17690] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 00:12:14 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:12:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) [ 467.980877][T17700] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 468.093158][T17710] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 00:12:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:14 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x408c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4180}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') [ 468.201923][ T9554] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 468.476121][ T9554] usb 6-1: Using ep0 maxpacket: 16 [ 468.640370][ T9554] usb 6-1: unable to get BOS descriptor or descriptor too short [ 468.720594][ T9554] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.730738][ T9554] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 468.739598][ T9554] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 468.910430][ T9554] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 468.919576][ T9554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.928016][ T9554] usb 6-1: Product: syz [ 468.932360][ T9554] usb 6-1: Manufacturer: syz [ 468.937026][ T9554] usb 6-1: SerialNumber: syz [ 468.981402][ T9554] cdc_ncm 6-1:1.0: bind() failure [ 469.184514][ T9402] usb 6-1: USB disconnect, device number 48 00:12:16 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003028d97102705a1a440000102030109025c0002010000000904000001020d00000524"], 0x0) 00:12:16 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:12:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c099, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00') bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8) read(r1, &(0x7f0000000040)=""/117, 0x75) r2 = accept$alg(r0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000000a3d) 00:12:16 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r2, 0xf2b, 0x0, 0x0, {0x67}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xffffffffffffffcc) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x50, 0x8, 0x91, 0x6}}) sync() ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 00:12:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27}, 0x24}}, 0x0) [ 469.774899][T17746] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 469.835987][ C1] sd 0:0:1:0: [sg0] tag#2508 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 469.846477][ C1] sd 0:0:1:0: [sg0] tag#2508 CDB: Test Unit Ready [ 469.853014][ C1] sd 0:0:1:0: [sg0] tag#2508 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.862655][ C1] sd 0:0:1:0: [sg0] tag#2508 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.872318][ C1] sd 0:0:1:0: [sg0] tag#2508 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.882000][ C1] sd 0:0:1:0: [sg0] tag#2508 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.891634][ C1] sd 0:0:1:0: [sg0] tag#2508 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.901269][ C1] sd 0:0:1:0: [sg0] tag#2508 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.910900][ C1] sd 0:0:1:0: [sg0] tag#2508 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.920544][ C1] sd 0:0:1:0: [sg0] tag#2508 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00:12:16 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 00:12:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27}, 0x24}}, 0x0) [ 469.930203][ C1] sd 0:0:1:0: [sg0] tag#2508 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.939793][ C1] sd 0:0:1:0: [sg0] tag#2508 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.949437][ C1] sd 0:0:1:0: [sg0] tag#2508 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.959081][ C1] sd 0:0:1:0: [sg0] tag#2508 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.968750][ C1] sd 0:0:1:0: [sg0] tag#2508 CDB[c0]: 00 00 00 00 00 00 00 00 00:12:16 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:12:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27}, 0x24}}, 0x0) [ 470.051081][ T8926] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 470.086091][T17766] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:16 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x67) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x6}) memfd_create(&(0x7f0000000400)='GVL\x00\x00\x90U\x91\xaf\xd4\x01j\x12W\x11\x97e4\x0f\xc5m\xcc\x1b\xc2Y\x11\xdf+\xd8\x04\x00\x00\x00\xb2n\xe1\x82\xf0\xb3\x1a\x98JH\x06l\x0e\xa0\xa23\xba\nB\x87v\xc4\x03\xf8\x8c\xec\x02Dx\x13\x06\xa8\xc4\xb4\x90\xa1\xef\xc5F\x80\xa0-\xff\x7f\x00\x00j1p\xfc\xe8\xc7uQ\xbfay\x8c\xb2\xca\xc8\xf5\x8be3\xa1,\x96\xc1k\x80\x04\x12\xb9!\xe6\x88\xc0\xb2\xb2s\xdbE\xb9\x19\t\xf0e\f\x98\xe7\xbcI\xbe\ax\xfe^\x86\xbf\xa3Y;\xf4x\x94\x1e_O\x8b\xb4C\"\x1f)\xb3\x17-\xb2w\xa4\x84\x06*\x9fE\x9aCW\x11\x1d\xbf\xac\x95\xc0G\x87R\xffS\xd8\xfc\x13\x8b\xd7\x00^8\x9c\v6w\x8a\xc1\x1c3\x03\x03\x80l\xa8z3c*\xcf\xba|I\xe02\xbf\xc8\x98\xf4\xfb\x8a\x89yZ\xea,\xbcr\xa4\xb1K!3b\xceuK\x19x\xdd\xfa\xea\x8d\x0ex\xd8\x8b\xe5\x91\x94Ze\xecN\x18\xe9^N>B=\xd5\xe34\xed4\xae\x8e`\xd3\xc2\xdb\x8b\'=\xc2E$d!\xd54KL\xdbA\xd7\x85\x1e0q\r\x00A ;\xbb\x04o\xa9bF\xc1\xf6\xb1\x93\xf8X*D\xd8\xf3\xdb\xc1\xa4@\x17f\x13\x7fI\xb7\xea\xeeBnj\xd0>\x1b\xc0\xd3\xc0\xf9^/\xa3e\x88\x1a\b\x05/1\x82\x86\x9d\x15\x1e\x9ci\xdf\x82\xc4V\xb5\xf5EZ\xc5/\xfe\xd9\xcf\x1f\x9d\xd9P\xa4\x84@\xad\x7f\x17\xc3Mn\x02\xa1;:\xa3\xe1\xf3\xb2\xe5\xc2Cn\x00db\xa5\x8c\xc8\xee\x84Onq\bs\xf1\xfd\x92$9Y\x15\x13\"\x81\xf9A\x7f\xa0\xe5\x17\xb4e@\xe6S?E\x10c\xa1\xc2(\x9f\x87[F\xf6\x03\xbc\xb0\xe8\xac8\xf8<\xcd\x84\xbd\x0e', 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x6ac43, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x1000000000000a) connect$rxrpc(r4, &(0x7f00000001c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0xc0fc) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) 00:12:16 executing program 0: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="0800080016040000140002"], 0x34}}, 0x0) [ 470.277104][ C0] sd 0:0:1:0: [sg0] tag#2502 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 470.287671][ C0] sd 0:0:1:0: [sg0] tag#2502 CDB: Test Unit Ready [ 470.294212][ C0] sd 0:0:1:0: [sg0] tag#2502 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.303873][ C0] sd 0:0:1:0: [sg0] tag#2502 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.313523][ C0] sd 0:0:1:0: [sg0] tag#2502 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.323178][ C0] sd 0:0:1:0: [sg0] tag#2502 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.332948][ C0] sd 0:0:1:0: [sg0] tag#2502 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.342619][ C0] sd 0:0:1:0: [sg0] tag#2502 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.352430][ C0] sd 0:0:1:0: [sg0] tag#2502 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.362092][ C0] sd 0:0:1:0: [sg0] tag#2502 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.371747][ C0] sd 0:0:1:0: [sg0] tag#2502 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.381399][ C0] sd 0:0:1:0: [sg0] tag#2502 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.391082][ C0] sd 0:0:1:0: [sg0] tag#2502 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.397197][ C1] sd 0:0:1:0: [sg0] tag#2503 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 470.400709][ C0] sd 0:0:1:0: [sg0] tag#2502 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.411035][ C1] sd 0:0:1:0: [sg0] tag#2503 CDB: Test Unit Ready [ 470.420580][ C0] sd 0:0:1:0: [sg0] tag#2502 CDB[c0]: 00 00 00 00 00 00 00 00 [ 470.426972][ C1] sd 0:0:1:0: [sg0] tag#2503 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.444065][ C1] sd 0:0:1:0: [sg0] tag#2503 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.453704][ C1] sd 0:0:1:0: [sg0] tag#2503 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.463344][ C1] sd 0:0:1:0: [sg0] tag#2503 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.472977][ C1] sd 0:0:1:0: [sg0] tag#2503 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.482608][ C1] sd 0:0:1:0: [sg0] tag#2503 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.492238][ C1] sd 0:0:1:0: [sg0] tag#2503 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.501865][ C1] sd 0:0:1:0: [sg0] tag#2503 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.511509][ C1] sd 0:0:1:0: [sg0] tag#2503 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.521136][ C1] sd 0:0:1:0: [sg0] tag#2503 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.530771][ C1] sd 0:0:1:0: [sg0] tag#2503 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.540438][ C1] sd 0:0:1:0: [sg0] tag#2503 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.550024][ C1] sd 0:0:1:0: [sg0] tag#2503 CDB[c0]: 00 00 00 00 00 00 00 00 [ 470.695888][ T8926] usb 6-1: Using ep0 maxpacket: 16 [ 470.860184][ T8926] usb 6-1: unable to get BOS descriptor or descriptor too short [ 470.940269][ T8926] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.953689][ T8926] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 470.962830][ T8926] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 471.130318][ T8926] usb 6-1: New USB device found, idVendor=0527, idProduct=a4a1, bcdDevice= 0.40 [ 471.139415][ T8926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.148359][ T8926] usb 6-1: Product: syz [ 471.153437][ T8926] usb 6-1: Manufacturer: syz [ 471.158061][ T8926] usb 6-1: SerialNumber: syz [ 471.201379][ T8926] cdc_ncm 6-1:1.0: bind() failure [ 471.404208][ T8926] usb 6-1: USB disconnect, device number 49 00:12:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:18 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:12:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c09a, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004005}, 0x8010) 00:12:18 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146035dd106730000c0bdd3aac49830f549d2e181baf9459c5c953948c6801d2c4945c08ba8c552fc99a7422007653872ecb4f63acdfe80810ebc261af997036da6793db013a92e2f0d8dbb301afb29f9c7d442f910c7f25914567f0cef055af57978720ba7347e43fc295d33c086e8bb7320287dd9d8b7c22790a25daef93aefb98867a025df18d22e00000000000000000000004c2bcb36be40a74ab69606f0c92925919d2809e864c2b4d8b56b3a45e9a838b4a9410a0bdf0f1f940b48fe4cd49682d3c94c37055ea57c6209269833d60b365c08d3e6911b4fbb39473a2177e09413bde14118119a3ed5e5aface6237bd0957056ab63daba04ed63450e6a6b130720248dafe380e9c3e348d2f9ec8b3e512d262cb72592e3ef517b2c1d63d8c08743a14b8fcf"], 0x67) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x6}) memfd_create(&(0x7f0000000400)='GVL\x00\x00\x90U\x91\xaf\xd4\x01j\x12W\x11\x97e4\x0f\xc5m\xcc\x1b\xc2Y\x11\xdf+\xd8\x04\x00\x00\x00\xb2n\xe1\x82\xf0\xb3\x1a\x98JH\x06l\x0e\xa0\xa23\xba\nB\x87v\xc4\x03\xf8\x8c\xec\x02Dx\x13\x06\xa8\xc4\xb4\x90\xa1\xef\xc5F\x80\xa0-\xff\x7f\x00\x00j1p\xfc\xe8\xc7uQ\xbfay\x8c\xb2\xca\xc8\xf5\x8be3\xa1,\x96\xc1k\x80\x04\x12\xb9!\xe6\x88\xc0\xb2\xb2s\xdbE\xb9\x19\t\xf0e\f\x98\xe7\xbcI\xbe\ax\xfe^\x86\xbf\xa3Y;\xf4x\x94\x1e_O\x8b\xb4C\"\x1f)\xb3\x17-\xb2w\xa4\x84\x06*\x9fE\x9aCW\x11\x1d\xbf\xac\x95\xc0G\x87R\xffS\xd8\xfc\x13\x8b\xd7\x00^8\x9c\v6w\x8a\xc1\x1c3\x03\x03\x80l\xa8z3c*\xcf\xba|I\xe02\xbf\xc8\x98\xf4\xfb\x8a\x89yZ\xea,\xbcr\xa4\xb1K!3b\xceuK\x19x\xdd\xfa\xea\x8d\x0ex\xd8\x8b\xe5\x91\x94Ze\xecN\x18\xe9^N>B=\xd5\xe34\xed4\xae\x8e`\xd3\xc2\xdb\x8b\'=\xc2E$d!\xd54KL\xdbA\xd7\x85\x1e0q\r\x00A ;\xbb\x04o\xa9bF\xc1\xf6\xb1\x93\xf8X*D\xd8\xf3\xdb\xc1\xa4@\x17f\x13\x7fI\xb7\xea\xeeBnj\xd0>\x1b\xc0\xd3\xc0\xf9^/\xa3e\x88\x1a\b\x05/1\x82\x86\x9d\x15\x1e\x9ci\xdf\x82\xc4V\xb5\xf5EZ\xc5/\xfe\xd9\xcf\x1f\x9d\xd9P\xa4\x84@\xad\x7f\x17\xc3Mn\x02\xa1;:\xa3\xe1\xf3\xb2\xe5\xc2Cn\x00db\xa5\x8c\xc8\xee\x84Onq\bs\xf1\xfd\x92$9Y\x15\x13\"\x81\xf9A\x7f\xa0\xe5\x17\xb4e@\xe6S?E\x10c\xa1\xc2(\x9f\x87[F\xf6\x03\xbc\xb0\xe8\xac8\xf8<\xcd\x84\xbd\x0e', 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x6ac43, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x1000000000000a) connect$rxrpc(r4, &(0x7f00000001c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0xc0fc) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) 00:12:18 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14b181, 0x0) fallocate(r0, 0x0, 0x4, 0x200200) [ 471.996034][T17807] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 472.024863][ C1] sd 0:0:1:0: [sg0] tag#2504 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 472.035389][ C1] sd 0:0:1:0: [sg0] tag#2504 CDB: Test Unit Ready [ 472.041897][ C1] sd 0:0:1:0: [sg0] tag#2504 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.051544][ C1] sd 0:0:1:0: [sg0] tag#2504 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.061175][ C1] sd 0:0:1:0: [sg0] tag#2504 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.070828][ C1] sd 0:0:1:0: [sg0] tag#2504 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.080463][ C1] sd 0:0:1:0: [sg0] tag#2504 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00:12:18 executing program 5: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') [ 472.090114][ C1] sd 0:0:1:0: [sg0] tag#2504 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.099825][ C1] sd 0:0:1:0: [sg0] tag#2504 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.109460][ C1] sd 0:0:1:0: [sg0] tag#2504 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.119095][ C1] sd 0:0:1:0: [sg0] tag#2504 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.128730][ C1] sd 0:0:1:0: [sg0] tag#2504 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00:12:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:18 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() tkill(0x0, 0x37) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) tkill(r0, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(r1) read$eventfd(r4, &(0x7f0000000000), 0x8) [ 472.138403][ C1] sd 0:0:1:0: [sg0] tag#2504 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.148043][ C1] sd 0:0:1:0: [sg0] tag#2504 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.157675][ C1] sd 0:0:1:0: [sg0] tag#2504 CDB[c0]: 00 00 00 00 00 00 00 00 00:12:18 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, 0x0, 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:12:18 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, "00006371ae9b1c01"}}}}}, 0x0) 00:12:18 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x0, 0xf2b, 0x0, 0x0, {0x67}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd3) sync() ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 00:12:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:19 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, 0x0, 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) [ 472.400852][T17836] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c09b, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:19 executing program 0: 00:12:19 executing program 5: 00:12:19 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, 0x0, 0xfeac) splice(r0, 0x0, r4, 0x0, 0x20000000010002, 0x0) 00:12:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 00:12:19 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x0, 0xf2b, 0x0, 0x0, {0x67}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd3) sync() ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 00:12:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 00:12:19 executing program 5: 00:12:19 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfeac) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x20000000010002, 0x0) 00:12:19 executing program 0: [ 472.643695][T17857] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 00:12:19 executing program 1: [ 472.758388][T17868] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c09c, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:19 executing program 0: 00:12:19 executing program 5: 00:12:19 executing program 1: 00:12:19 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfeac) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x20000000010002, 0x0) 00:12:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, 0x0, 0x0) 00:12:19 executing program 0: 00:12:19 executing program 1: 00:12:19 executing program 5: 00:12:19 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfeac) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x20000000010002, 0x0) [ 473.012484][T17888] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, 0x0, 0x0) 00:12:19 executing program 1: [ 473.109004][T17897] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c09d, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:19 executing program 0: 00:12:19 executing program 5: 00:12:19 executing program 1: 00:12:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, 0x0, 0x0) 00:12:19 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000010002, 0x0) 00:12:20 executing program 5: 00:12:20 executing program 1: 00:12:20 executing program 0: 00:12:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 00:12:20 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000010002, 0x0) [ 473.389228][T17917] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:20 executing program 5: [ 473.548339][T17929] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c09e, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 00:12:20 executing program 0: 00:12:20 executing program 1: 00:12:20 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000010002, 0x0) 00:12:20 executing program 5: 00:12:20 executing program 0: 00:12:20 executing program 5: 00:12:20 executing program 1: 00:12:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) [ 473.772443][T17946] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:20 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x0, 0x0) 00:12:20 executing program 0: [ 473.905566][T17956] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c09f, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:20 executing program 5: 00:12:20 executing program 1: 00:12:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 00:12:20 executing program 0: 00:12:20 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x0, 0x0) 00:12:20 executing program 1: 00:12:20 executing program 0: 00:12:20 executing program 5: 00:12:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 00:12:20 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r4, 0x0, 0x0, 0x0) [ 474.168037][T17974] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:20 executing program 0: [ 474.301006][T17987] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c0a0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:21 executing program 5: 00:12:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 00:12:21 executing program 1: 00:12:21 executing program 4: 00:12:21 executing program 0: 00:12:21 executing program 1: 00:12:21 executing program 0: 00:12:21 executing program 5: 00:12:21 executing program 4: [ 474.539807][T18002] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:21 executing program 1: [ 474.725694][T18013] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c0a1, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:21 executing program 5: 00:12:21 executing program 4: 00:12:21 executing program 0: 00:12:21 executing program 1: 00:12:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:21 executing program 4: 00:12:21 executing program 5: 00:12:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:12:21 executing program 0: 00:12:21 executing program 1: 00:12:21 executing program 4: 00:12:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c0a2, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27}, 0x24}}, 0x0) 00:12:21 executing program 5: 00:12:21 executing program 4: 00:12:21 executing program 1: 00:12:21 executing program 0: 00:12:21 executing program 5: 00:12:21 executing program 1: 00:12:21 executing program 4: 00:12:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27}, 0x24}}, 0x0) 00:12:21 executing program 0: 00:12:22 executing program 4: 00:12:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c0a3, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:22 executing program 5: 00:12:22 executing program 1: 00:12:22 executing program 0: 00:12:22 executing program 4: 00:12:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27}, 0x24}}, 0x0) 00:12:22 executing program 5: 00:12:22 executing program 4: 00:12:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@migrate={0x50, 0x21, 0xd39, 0x0, 0x0, {{@in6=@loopback, @in=@local}}}, 0x50}}, 0x0) 00:12:22 executing program 1: 00:12:22 executing program 0: 00:12:22 executing program 5: 00:12:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c0a4, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:22 executing program 4: 00:12:22 executing program 3: 00:12:22 executing program 1: 00:12:22 executing program 0: 00:12:22 executing program 5: 00:12:22 executing program 0: 00:12:22 executing program 5: 00:12:22 executing program 3: 00:12:22 executing program 4: 00:12:22 executing program 1: 00:12:22 executing program 0: 00:12:22 executing program 5: 00:12:22 executing program 3: 00:12:22 executing program 4: 00:12:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c0a5, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:22 executing program 1: 00:12:22 executing program 0: 00:12:23 executing program 3: 00:12:23 executing program 4: 00:12:23 executing program 1: 00:12:23 executing program 5: 00:12:23 executing program 0: 00:12:23 executing program 4: 00:12:23 executing program 3: 00:12:23 executing program 5: 00:12:23 executing program 1: 00:12:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c0a6, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:23 executing program 0: 00:12:23 executing program 4: 00:12:23 executing program 3: 00:12:23 executing program 1: 00:12:23 executing program 5: 00:12:23 executing program 4: 00:12:23 executing program 0: 00:12:23 executing program 1: 00:12:23 executing program 0: 00:12:23 executing program 5: 00:12:23 executing program 3: 00:12:23 executing program 4: 00:12:23 executing program 1: 00:12:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c0a7, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:23 executing program 3: 00:12:23 executing program 5: 00:12:23 executing program 0: 00:12:23 executing program 4: 00:12:23 executing program 3: 00:12:23 executing program 1: 00:12:23 executing program 5: 00:12:23 executing program 0: 00:12:24 executing program 5: 00:12:24 executing program 4: 00:12:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c0a8, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:24 executing program 3: 00:12:24 executing program 1: 00:12:24 executing program 0: 00:12:24 executing program 5: 00:12:24 executing program 4: 00:12:24 executing program 3: 00:12:24 executing program 1: 00:12:24 executing program 0: 00:12:24 executing program 5: 00:12:24 executing program 4: 00:12:24 executing program 0: 00:12:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c0a9, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:24 executing program 1: 00:12:24 executing program 3: 00:12:24 executing program 5: 00:12:24 executing program 0: 00:12:24 executing program 4: 00:12:24 executing program 3: 00:12:24 executing program 5: 00:12:24 executing program 1: 00:12:24 executing program 4: 00:12:24 executing program 0: 00:12:24 executing program 1: [ 478.052366][T18234] validate_nla: 17 callbacks suppressed [ 478.052376][T18234] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:24 executing program 5: 00:12:24 executing program 3: 00:12:24 executing program 4: 00:12:24 executing program 0: 00:12:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c0aa, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:24 executing program 1: 00:12:24 executing program 5: [ 478.325430][T18250] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:25 executing program 3: 00:12:25 executing program 0: 00:12:25 executing program 1: 00:12:25 executing program 4: 00:12:25 executing program 0: [ 478.495109][T18261] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:25 executing program 1: 00:12:25 executing program 5: 00:12:25 executing program 4: 00:12:25 executing program 3: 00:12:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c0ab, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:25 executing program 1: 00:12:25 executing program 0: 00:12:25 executing program 3: 00:12:25 executing program 5: 00:12:25 executing program 4: 00:12:25 executing program 1: [ 478.795710][T18275] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:25 executing program 0: 00:12:25 executing program 3: 00:12:25 executing program 4: 00:12:25 executing program 5: 00:12:25 executing program 1: [ 478.943304][T18285] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:25 executing program 0: 00:12:25 executing program 3: 00:12:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c0ac, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:25 executing program 4: 00:12:25 executing program 1: 00:12:25 executing program 5: 00:12:25 executing program 4: 00:12:25 executing program 3: 00:12:25 executing program 0: [ 479.226741][T18300] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:25 executing program 1: 00:12:25 executing program 4: 00:12:25 executing program 5: 00:12:26 executing program 3: 00:12:26 executing program 0: [ 479.381008][T18310] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:26 executing program 1: 00:12:26 executing program 3: 00:12:26 executing program 5: 00:12:26 executing program 4: 00:12:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c0ad, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:26 executing program 0: 00:12:26 executing program 1: 00:12:26 executing program 3: 00:12:26 executing program 5: 00:12:26 executing program 4: 00:12:26 executing program 0: [ 479.667049][T18327] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:26 executing program 3: 00:12:26 executing program 1: 00:12:26 executing program 5: 00:12:26 executing program 0: 00:12:26 executing program 4: [ 479.823427][T18338] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c0ae, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:26 executing program 3: 00:12:26 executing program 1: 00:12:26 executing program 5: 00:12:26 executing program 0: 00:12:26 executing program 4: 00:12:26 executing program 4: 00:12:26 executing program 1: 00:12:26 executing program 0: 00:12:26 executing program 3: 00:12:26 executing program 5: [ 480.200065][T18355] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:26 executing program 1: 00:12:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c0af, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:27 executing program 4: 00:12:27 executing program 0: 00:12:27 executing program 3: 00:12:27 executing program 5: 00:12:27 executing program 1: 00:12:27 executing program 3: 00:12:27 executing program 4: 00:12:27 executing program 5: 00:12:27 executing program 0: 00:12:27 executing program 1: 00:12:27 executing program 0: 00:12:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c0b0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite6\x00') setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200), 0x0) preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) dup(0xffffffffffffffff) 00:12:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) 00:12:27 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x2}}, 0x24, 0x0) 00:12:27 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f00000002c0)=&(0x7f0000000280)={&(0x7f0000000100)={&(0x7f0000000040)}, 0x0, &(0x7f0000000140)}, &(0x7f0000000300)=0x18) 00:12:27 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast2=0xe0000003, @local, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @rr={0x7, 0x7, 0x0, [@broadcast]}, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @broadcast]}, @ssrr={0x89, 0x23, 0x0, [@broadcast, @private, @broadcast, @loopback, @multicast2, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, @private]}]}}}}}}}, 0x0) 00:12:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) [ 481.028411][T18409] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:12:27 executing program 5: openat$mice(0xffffff9c, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xa000000400000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2c304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8}, 0x1, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) syz_open_procfs(r0, &(0x7f0000000040)='cpuset\x00') open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000440)='(\xe0\xf5\x00\xfbi\xa4\x8e\xc4\x96\xa4?\x10\x91\xfa7\xd7\xea\xc8\xd4\xaf\x15k8I\x11\x9b\x18DT\xfb\x01\xabj<>\xb4\xefj\xde;%\fpB\x81\'\x9c?\\,\x10\xca\x19\x14\x1d\x01\xcf\xd7A\x80_\xe7\xbb\x96\x16\x01M@\x0f\xd6\xbd|+D\x11\v\x90\xe2n\xb5F\xcb4F\x88\x90\xc1\x10\xdc\x06\x93\xd3\x04\x11\xb7\xe1pv\x1f~t&\xd9-u\x7f\asWx-V\x92\x1d\x96r\xe5W\x93\a\x83\r\x99L%Do_\xff\xbb5u\xf0 S\xc1X\xcc\xe3t{\v\"\x84\xc6\xc0\x02\xfdC\x89\x94\x8c\x87\xb0\x03\xbaa^\xf3\xa9\x0e\x18\x92<=\xe3*\xa4\xa7\xac\xd8\xa6qs0\xa8\xb9xk\xfd\x96\xd6-\xad\xeb5\x1bT\xdf\x83m\x1b\xf0\xddt\xef\x85>\xeb\xc8u\x911[q\x96JH\x89\xe75\xe1>\xce\xa3\x8d\vf\xb4\xca\x9d\xc8\xa4\xca', &(0x7f0000000540)='system\x02\xe8\xb0C\xc5k\xe3\x06\x00\x00z2\x89\x02\xaa\xac.0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c0b1, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:27 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, 0x0) read(r0, &(0x7f0000002100)=""/4095, 0xfff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 00:12:28 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 00:12:28 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast2=0xe0000003, @local, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @rr={0x7, 0x7, 0x0, [@broadcast]}, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @broadcast]}, @ssrr={0x89, 0x23, 0x0, [@broadcast, @private, @broadcast, @loopback, @multicast2, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, @private]}]}}}}}}}, 0x0) 00:12:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}}) write$tun(r2, &(0x7f0000000000)={@void, @val={0x0, 0x4, 0x0, 0x92b}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @loopback, @remote}, @timestamp}}}, 0xfdef) 00:12:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) open(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 00:12:28 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 00:12:28 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) io_setup(0x400b, 0x0) keyctl$setperm(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) [ 481.635145][T18459] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:12:28 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 00:12:28 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod$loop(&(0x7f0000000180)='./bus/file1\x00', 0x0, 0x1) setxattr$security_capability(&(0x7f00000001c0)='./bus/file1\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000100)=@v3, 0x18, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x800) chown(&(0x7f0000000600)='./bus/file1\x00', 0x0, 0x0) 00:12:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0xa4}) 00:12:28 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) [ 482.164055][T18497] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:12:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1c0b2, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:28 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) io_setup(0x400b, 0x0) keyctl$setperm(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 00:12:28 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast2=0xe0000003, @local, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @rr={0x7, 0x7, 0x0, [@broadcast]}, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @broadcast]}, @ssrr={0x89, 0x23, 0x0, [@broadcast, @private, @broadcast, @loopback, @multicast2, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, @private]}]}}}}}}}, 0x0) 00:12:28 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) listxattr(&(0x7f0000000080)='./bus\x00', 0x0, 0x1000000) 00:12:29 executing program 3: openat$mice(0xffffff9c, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xa000000400000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2c304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8}, 0x1, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000440)='(\xe0\xf5\x00\xfbi\xa4\x8e\xc4\x96\xa4?\x10\x91\xfa7\xd7\xea\xc8\xd4\xaf\x15k8I\x11\x9b\x18DT\xfb\x01\xabj<>\xb4\xefj\xde;%\fpB\x81\'\x9c?\\,\x10\xca\x19\x14\x1d\x01\xcf\xd7A\x80_\xe7\xbb\x96\x16\x01M@\x0f\xd6\xbd|+D\x11\v\x90\xe2n\xb5F\xcb4F\x88\x90\xc1\x10\xdc\x06\x93\xd3\x04\x11\xb7\xe1pv\x1f~t&\xd9-u\x7f\asWx-V\x92\x1d\x96r\xe5W\x93\a\x83\r\x99L%Do_\xff\xbb5u\xf0 S\xc1X\xcc\xe3t{\v\"\x84\xc6\xc0\x02\xfdC\x89\x94\x8c\x87\xb0\x03\xbaa^\xf3\xa9\x0e\x18\x92<=\xe3*\xa4\xa7\xac\xd8\xa6qs0\xa8\xb9xk\xfd\x96\xd6-\xad\xeb5\x1bT\xdf\x83m\x1b\xf0\xddt\xef\x85>\xeb\xc8u\x911[q\x96JH\x89\xe75\xe1>\xce\xa3\x8d\vf\xb4\xca\x9d\xc8\xa4\xca', &(0x7f0000000540)='system\x02\xe8\xb0C\xc5k\xe3\x06\x00\x00z2\x89\x02\xaa\xac. /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.4 proc:/self/fd/3' not defined. [ 482.473077][T18517] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:12:29 executing program 1: prctl$PR_SET_DUMPABLE(0x4, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00\x00\x00\x00\x00\x00z\x9b\xb0\xe8t%\xfc\x96L\x82\xdb', 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e2300"], 0x3c) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') 00:12:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x20000, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0xa8}) 00:12:29 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x80000) msgctl$MSG_STAT(0x0, 0xb, 0x0) 00:12:29 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast2=0xe0000003, @local, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @rr={0x7, 0x7, 0x0, [@broadcast]}, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @broadcast]}, @ssrr={0x89, 0x23, 0x0, [@broadcast, @private, @broadcast, @loopback, @multicast2, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, @private]}]}}}}}}}, 0x0) 00:12:29 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4082, 0xff2}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 00:12:29 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2=0xe0000003, @local, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @rr={0x7, 0x7, 0x0, [@broadcast]}, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @broadcast]}, @ssrr={0x89, 0x23, 0x0, [@broadcast, @private, @broadcast, @loopback, @multicast2, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, @private]}]}}}}}}}, 0x0) [ 482.780088][T18551] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.1 proc:/self/fd/4' not defined. 00:12:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="baf80c432c9187f01766efbafc0cb8bd00ef0f320f624e10bad104ec26660ff85f50361b0f20c0663502000080f26eb800088ec00fae470b", 0x38}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0x79}) 00:12:29 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2=0xe0000003, @local, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @rr={0x7, 0x7, 0x0, [@broadcast]}, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @broadcast]}, @ssrr={0x89, 0x23, 0x0, [@broadcast, @private, @broadcast, @loopback, @multicast2, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, @private]}]}}}}}}}, 0x0) 00:12:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x30000, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$9p(0xffffffffffffffff, &(0x7f0000001400), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000480)=""/186, 0xba}, {&(0x7f0000000140)=""/160, 0xa0}, {&(0x7f00000002c0)=""/157, 0x9d}], 0x5}}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) open(0x0, 0x0, 0x0) dup(0xffffffffffffffff) 00:12:29 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2=0xe0000003, @local, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @rr={0x7, 0x7, 0x0, [@broadcast]}, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @broadcast]}, @ssrr={0x89, 0x23, 0x0, [@broadcast, @private, @broadcast, @loopback, @multicast2, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, @private]}]}}}}}}}, 0x0) [ 483.110993][T18591] validate_nla: 11 callbacks suppressed [ 483.111002][T18591] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000140)=""/160, 0xa0}, {&(0x7f00000002c0)=""/157, 0x9d}, {&(0x7f0000000440)=""/31, 0x1f}], 0x4}}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) dup(0xffffffffffffffff) 00:12:29 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) 00:12:29 executing program 5: exit(0x0) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@uid={'uid'}}]}) 00:12:30 executing program 0: syz_emit_ethernet(0x5a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast2=0xe0000003, @local, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @rr={0x7, 0x7, 0x0, [@broadcast]}, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @broadcast]}]}}}}}}}, 0x0) [ 483.330657][T18613] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7cf"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002380)=ANY=[@ANYRES32], 0x60}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180), 0x0) 00:12:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x31430, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:30 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000540), 0x24, 0x0) [ 483.525744][T18632] ntfs: (device loop5): parse_options(): Unrecognized mount option . 00:12:30 executing program 0: syz_emit_ethernet(0x5a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast2=0xe0000003, @local, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @rr={0x7, 0x7, 0x0, [@broadcast]}, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @broadcast]}]}}}}}}}, 0x0) [ 483.615933][T18635] ISOFS: Unable to identify CD-ROM format. [ 483.616656][T18649] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:30 executing program 0: syz_emit_ethernet(0x5a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast2=0xe0000003, @local, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @rr={0x7, 0x7, 0x0, [@broadcast]}, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @broadcast]}]}}}}}}}, 0x0) [ 483.728430][T18658] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 483.764931][T18635] ISOFS: Unable to identify CD-ROM format. 00:12:30 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./bus/file1\x00', 0x0, 0x1) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chown(&(0x7f0000000600)='./bus/file1\x00', 0x0, 0x0) [ 483.806036][T18663] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:12:30 executing program 0: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast2=0xe0000003, @local, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @rr={0x7, 0x7, 0x0, [@broadcast]}, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @broadcast]}, @ssrr={0x89, 0x1f, 0x0, [@broadcast, @private, @broadcast, @loopback, @multicast2, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0) 00:12:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3ffff, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:30 executing program 4: sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000005c0)=ANY=[@ANYBLOB="5b6440391abf3e2d4c8c3a"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) [ 483.998342][T18673] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 484.062894][T18677] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:30 executing program 3: open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000440)='(\xe0\xf5\x00\xfbi\xa4\x8e\xc4\x96\xa4?\x10\x91\xfa7\xd7\xea\xc8\xd4\xaf\x15k8I\x11\x9b\x18DT\xfb\x01\xabj<>\xb4\xefj\xde;%\fpB\x81\'\x9c?\\,\x10\xca\x19\x14\x1d\x01\xcf\xd7A\x80_\xe7\xbb\x96\x16\x01M@\x0f\xd6\xbd|+D\x11\v\x90\xe2n\xb5F\xcb4F\x88\x90\xc1\x10\xdc\x06\x93\xd3\x04\x11\xb7\xe1pv\x1f~t&\xd9-u\x7f\asWx-V\x92\x1d\x96r\xe5W\x93\a\x83\r\x99L%Do_\xff\xbb5u\xf0 S\xc1X\xcc\xe3t{\v\"\x84\xc6\xc0\x02\xfdC\x89\x94\x8c\x87\xb0\x03\xbaa^\xf3\xa9\x0e\x18\x92<=\xe3*\xa4\xa7\xac\xd8\xa6qs0\xa8\xb9xk\xfd\x96\xd6-\xad\xeb5\x1bT\xdf\x83m\x1b\xf0\xddt\xef\x85>\xeb\xc8u\x911[q\x96JH\x89\xe75\xe1>\xce\xa3\x8d\vf\xb4\xca\x9d\xc8\xa4\xca', &(0x7f0000000540)='system\x02\xe8\xb0C\xc5k\xe3\x06\x00\x00z2\x89\x02\xaa\xac.0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x40000, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) 00:12:31 executing program 0: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast2=0xe0000003, @local, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @rr={0x7, 0x7, 0x0, [@broadcast]}, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @broadcast]}, @ssrr={0x89, 0x1f, 0x0, [@broadcast, @private, @broadcast, @loopback, @multicast2, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0) [ 484.441368][T18712] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:31 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) 00:12:31 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) renameat(r0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 00:12:31 executing program 0: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast2=0xe0000003, @local, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @rr={0x7, 0x7, 0x0, [@broadcast]}, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @broadcast]}, @ssrr={0x89, 0x1f, 0x0, [@broadcast, @private, @broadcast, @loopback, @multicast2, @rand_addr, @private]}]}}}}}}}, 0x0) [ 484.622928][T18733] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:12:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x100000, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) [ 484.877100][T18748] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 485.039482][T18757] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 500.779489][ T0] NOHZ: local_softirq_pending 08 [ 503.340017][ T0] NOHZ: local_softirq_pending 08 [ 521.900804][ T0] NOHZ: local_softirq_pending 08 [ 552.612819][ T7802] kworker/dying (7802) used greatest stack depth: 23120 bytes left [ 562.842934][ T0] NOHZ: local_softirq_pending 08 [ 582.681027][ T0] NOHZ: local_softirq_pending 08 [ 637.073915][ T1159] INFO: task syz-executor.4:18687 can't die for more than 143 seconds. [ 637.082206][ T1159] syz-executor.4 D27880 18687 7259 0x00004004 [ 637.091995][ T1159] Call Trace: [ 637.102823][ T1159] __schedule+0x8e1/0x1eb0 [ 637.109380][ T1159] ? io_schedule_timeout+0x140/0x140 [ 637.118462][ T1159] ? lockdep_hardirqs_on+0x6a/0xe0 [ 637.123696][ T1159] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 637.129724][ T1159] ? prepare_to_wait+0x121/0x2a0 [ 637.135861][ T1159] schedule+0xd0/0x2a0 [ 637.139962][ T1159] bit_wait+0x12/0xa0 [ 637.145483][ T1159] __wait_on_bit+0x60/0x190 [ 637.149993][ T1159] ? out_of_line_wait_on_bit_lock+0x110/0x110 [ 637.157105][ T1159] out_of_line_wait_on_bit+0xd5/0x110 [ 637.162469][ T1159] ? __wait_on_bit+0x190/0x190 [ 637.168141][ T1159] ? var_wake_function+0x130/0x130 [ 637.173386][ T1159] wait_for_key_construction+0x10b/0x140 [ 637.179806][ T1159] request_key_tag+0x7a/0xb0 [ 637.185229][ T1159] dns_query+0x257/0x6c3 [ 637.189499][ T1159] ceph_parse_ips+0x77f/0x8c0 [ 637.195184][ T1159] ? ceph_con_opened+0x50/0x50 [ 637.199963][ T1159] ? lookup_constant+0xf0/0xf0 [ 637.207721][ T1159] ? __fs_parse+0x269/0x810 [ 637.212290][ T1159] ceph_parse_mon_ips+0x59/0xc0 [ 637.218049][ T1159] ceph_parse_mount_param+0x1239/0x17e0 [ 637.224194][ T1159] ? lock_is_held_type+0xb0/0xe0 [ 637.229157][ T1159] ? vfs_parse_fs_string+0xc0/0x150 [ 637.235773][ T1159] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 637.241466][ T1159] ? extra_mon_dispatch+0x130/0x130 [ 637.248129][ T1159] ? vfs_parse_fs_string+0xc0/0x150 [ 637.253357][ T1159] ? extra_mon_dispatch+0x130/0x130 [ 637.259322][ T1159] vfs_parse_fs_param+0x203/0x550 [ 637.264873][ T1159] vfs_parse_fs_string+0xe6/0x150 [ 637.270016][ T1159] ? vfs_parse_fs_param+0x550/0x550 [ 637.277120][ T1159] ? alloc_fs_context+0x56e/0x880 [ 637.282268][ T1159] do_mount+0x1222/0x1df0 [ 637.287320][ T1159] ? copy_mount_string+0x40/0x40 [ 637.292255][ T1159] ? __might_fault+0x190/0x1d0 [ 637.297826][ T1159] ? _copy_from_user+0x138/0x190 [ 637.302762][ T1159] ? memdup_user+0x7c/0xd0 [ 637.307876][ T1159] __x64_sys_mount+0x18f/0x230 [ 637.312638][ T1159] do_syscall_64+0x60/0xe0 [ 637.318584][ T1159] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 637.325070][ T1159] RIP: 0033:0x45cb19 [ 637.328966][ T1159] Code: Bad RIP value. [ 637.333032][ T1159] RSP: 002b:00007f317854fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 637.342547][ T1159] RAX: ffffffffffffffda RBX: 00000000004f7240 RCX: 000000000045cb19 [ 637.351082][ T1159] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 00000000200005c0 [ 637.359603][ T1159] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 637.368205][ T1159] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 637.376731][ T1159] R13: 0000000000000771 R14: 00000000004ca736 R15: 00007f31785506d4 [ 637.385228][ T1159] INFO: task syz-executor.4:18687 blocked for more than 143 seconds. [ 637.393284][ T1159] Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 637.400992][ T1159] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 637.411276][ T1159] syz-executor.4 D27880 18687 7259 0x00004004 [ 637.418181][ T1159] Call Trace: [ 637.421694][ T1159] __schedule+0x8e1/0x1eb0 [ 637.428327][ T1159] ? io_schedule_timeout+0x140/0x140 [ 637.434909][ T1159] ? lockdep_hardirqs_on+0x6a/0xe0 [ 637.440035][ T1159] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 637.446822][ T1159] ? prepare_to_wait+0x121/0x2a0 [ 637.451785][ T1159] schedule+0xd0/0x2a0 [ 637.456657][ T1159] bit_wait+0x12/0xa0 [ 637.460650][ T1159] __wait_on_bit+0x60/0x190 [ 637.466331][ T1159] ? out_of_line_wait_on_bit_lock+0x110/0x110 [ 637.472509][ T1159] out_of_line_wait_on_bit+0xd5/0x110 [ 637.478800][ T1159] ? __wait_on_bit+0x190/0x190 [ 637.484043][ T1159] ? var_wake_function+0x130/0x130 [ 637.489201][ T1159] wait_for_key_construction+0x10b/0x140 [ 637.495648][ T1159] request_key_tag+0x7a/0xb0 [ 637.500242][ T1159] dns_query+0x257/0x6c3 [ 637.505302][ T1159] ceph_parse_ips+0x77f/0x8c0 [ 637.509980][ T1159] ? ceph_con_opened+0x50/0x50 [ 637.515667][ T1159] ? lookup_constant+0xf0/0xf0 [ 637.520440][ T1159] ? __fs_parse+0x269/0x810 [ 637.525638][ T1159] ceph_parse_mon_ips+0x59/0xc0 [ 637.530491][ T1159] ceph_parse_mount_param+0x1239/0x17e0 [ 637.538144][ T1159] ? lock_is_held_type+0xb0/0xe0 [ 637.543086][ T1159] ? vfs_parse_fs_string+0xc0/0x150 [ 637.549102][ T1159] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 637.556009][ T1159] ? extra_mon_dispatch+0x130/0x130 [ 637.561221][ T1159] ? vfs_parse_fs_string+0xc0/0x150 [ 637.567449][ T1159] ? extra_mon_dispatch+0x130/0x130 [ 637.572673][ T1159] vfs_parse_fs_param+0x203/0x550 [ 637.578439][ T1159] vfs_parse_fs_string+0xe6/0x150 [ 637.583948][ T1159] ? vfs_parse_fs_param+0x550/0x550 [ 637.589157][ T1159] ? alloc_fs_context+0x56e/0x880 [ 637.595043][ T1159] do_mount+0x1222/0x1df0 [ 637.599513][ T1159] ? copy_mount_string+0x40/0x40 [ 637.605408][ T1159] ? __might_fault+0x190/0x1d0 [ 637.610285][ T1159] ? _copy_from_user+0x138/0x190 [ 637.616149][ T1159] ? memdup_user+0x7c/0xd0 [ 637.620578][ T1159] __x64_sys_mount+0x18f/0x230 [ 637.626088][ T1159] do_syscall_64+0x60/0xe0 [ 637.630506][ T1159] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 637.637093][ T1159] RIP: 0033:0x45cb19 [ 637.641005][ T1159] Code: Bad RIP value. [ 637.647538][ T1159] RSP: 002b:00007f317854fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 637.656468][ T1159] RAX: ffffffffffffffda RBX: 00000000004f7240 RCX: 000000000045cb19 [ 637.665441][ T1159] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 00000000200005c0 [ 637.674130][ T1159] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 637.682114][ T1159] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 637.690850][ T1159] R13: 0000000000000771 R14: 00000000004ca736 R15: 00007f31785506d4 [ 637.699397][ T1159] INFO: task syz-executor.4:18697 can't die for more than 143 seconds. [ 637.708279][ T1159] syz-executor.4 D29304 18697 7259 0x00000006 [ 637.715671][ T1159] Call Trace: [ 637.718967][ T1159] __schedule+0x8e1/0x1eb0 [ 637.723368][ T1159] ? io_schedule_timeout+0x140/0x140 [ 637.729940][ T1159] ? lockdep_hardirqs_on+0x6a/0xe0 [ 637.735795][ T1159] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 637.741621][ T1159] ? prepare_to_wait+0x121/0x2a0 [ 637.747468][ T1159] schedule+0xd0/0x2a0 [ 637.751546][ T1159] bit_wait+0x12/0xa0 [ 637.757543][ T1159] __wait_on_bit+0x60/0x190 [ 637.762074][ T1159] ? out_of_line_wait_on_bit_lock+0x110/0x110 [ 637.768873][ T1159] out_of_line_wait_on_bit+0xd5/0x110 [ 637.774824][ T1159] ? __wait_on_bit+0x190/0x190 [ 637.780014][ T1159] ? var_wake_function+0x130/0x130 [ 637.786037][ T1159] wait_for_key_construction+0x10b/0x140 [ 637.791679][ T1159] request_key_tag+0x7a/0xb0 [ 637.797562][ T1159] dns_query+0x257/0x6c3 [ 637.801812][ T1159] ceph_parse_ips+0x77f/0x8c0 [ 637.807400][ T1159] ? ceph_con_opened+0x50/0x50 [ 637.812199][ T1159] ? lookup_constant+0xf0/0xf0 [ 637.817687][ T1159] ? __fs_parse+0x269/0x810 [ 637.822190][ T1159] ceph_parse_mon_ips+0x59/0xc0 [ 637.827751][ T1159] ceph_parse_mount_param+0x1239/0x17e0 [ 637.833306][ T1159] ? lock_is_held_type+0xb0/0xe0 [ 637.838933][ T1159] ? vfs_parse_fs_string+0xc0/0x150 [ 637.844700][ T1159] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 637.850258][ T1159] ? extra_mon_dispatch+0x130/0x130 [ 637.856368][ T1159] ? vfs_parse_fs_string+0xc0/0x150 [ 637.861576][ T1159] ? extra_mon_dispatch+0x130/0x130 [ 637.868580][ T1159] vfs_parse_fs_param+0x203/0x550 [ 637.874183][ T1159] vfs_parse_fs_string+0xe6/0x150 [ 637.879217][ T1159] ? vfs_parse_fs_param+0x550/0x550 [ 637.885337][ T1159] ? alloc_fs_context+0x56e/0x880 [ 637.890382][ T1159] do_mount+0x1222/0x1df0 [ 637.895419][ T1159] ? copy_mount_string+0x40/0x40 [ 637.900356][ T1159] ? __might_fault+0x190/0x1d0 [ 637.906005][ T1159] ? _copy_from_user+0x138/0x190 [ 637.910953][ T1159] ? memdup_user+0x7c/0xd0 [ 637.916212][ T1159] __x64_sys_mount+0x18f/0x230 [ 637.920987][ T1159] do_syscall_64+0x60/0xe0 [ 637.926678][ T1159] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 637.932567][ T1159] RIP: 0033:0x45cb19 [ 637.937305][ T1159] Code: Bad RIP value. [ 637.941373][ T1159] RSP: 002b:00007f317852ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 637.950515][ T1159] RAX: ffffffffffffffda RBX: 00000000004f7240 RCX: 000000000045cb19 [ 637.959472][ T1159] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 00000000200005c0 [ 637.967971][ T1159] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 637.977889][ T1159] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 637.987084][ T1159] R13: 0000000000000771 R14: 00000000004ca736 R15: 00007f317852f6d4 [ 637.995621][ T1159] INFO: task syz-executor.4:18697 blocked for more than 144 seconds. [ 638.004254][ T1159] Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 638.011266][ T1159] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 638.020827][ T1159] syz-executor.4 D29304 18697 7259 0x00000006 [ 638.027628][ T1159] Call Trace: [ 638.030939][ T1159] __schedule+0x8e1/0x1eb0 [ 638.036262][ T1159] ? io_schedule_timeout+0x140/0x140 [ 638.041556][ T1159] ? lockdep_hardirqs_on+0x6a/0xe0 [ 638.047523][ T1159] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 638.053330][ T1159] ? prepare_to_wait+0x121/0x2a0 [ 638.059490][ T1159] schedule+0xd0/0x2a0 [ 638.064061][ T1159] bit_wait+0x12/0xa0 [ 638.068048][ T1159] __wait_on_bit+0x60/0x190 [ 638.072531][ T1159] ? out_of_line_wait_on_bit_lock+0x110/0x110 [ 638.079597][ T1159] out_of_line_wait_on_bit+0xd5/0x110 [ 638.086396][ T1159] ? __wait_on_bit+0x190/0x190 [ 638.091162][ T1159] ? var_wake_function+0x130/0x130 [ 638.097143][ T1159] wait_for_key_construction+0x10b/0x140 [ 638.102789][ T1159] request_key_tag+0x7a/0xb0 [ 638.108127][ T1159] dns_query+0x257/0x6c3 [ 638.112376][ T1159] ceph_parse_ips+0x77f/0x8c0 [ 638.117774][ T1159] ? ceph_con_opened+0x50/0x50 [ 638.122563][ T1159] ? lookup_constant+0xf0/0xf0 [ 638.128448][ T1159] ? __fs_parse+0x269/0x810 [ 638.132978][ T1159] ceph_parse_mon_ips+0x59/0xc0 [ 638.138568][ T1159] ceph_parse_mount_param+0x1239/0x17e0 [ 638.144641][ T1159] ? lock_is_held_type+0xb0/0xe0 [ 638.149594][ T1159] ? vfs_parse_fs_string+0xc0/0x150 [ 638.156505][ T1159] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 638.162064][ T1159] ? extra_mon_dispatch+0x130/0x130 [ 638.167960][ T1159] ? vfs_parse_fs_string+0xc0/0x150 [ 638.173159][ T1159] ? extra_mon_dispatch+0x130/0x130 [ 638.179114][ T1159] vfs_parse_fs_param+0x203/0x550 [ 638.185530][ T1159] vfs_parse_fs_string+0xe6/0x150 [ 638.190561][ T1159] ? vfs_parse_fs_param+0x550/0x550 [ 638.197751][ T1159] ? alloc_fs_context+0x56e/0x880 [ 638.202779][ T1159] do_mount+0x1222/0x1df0 [ 638.207814][ T1159] ? copy_mount_string+0x40/0x40 [ 638.212749][ T1159] ? __might_fault+0x190/0x1d0 [ 638.218187][ T1159] ? _copy_from_user+0x138/0x190 [ 638.223127][ T1159] ? memdup_user+0x7c/0xd0 [ 638.228341][ T1159] __x64_sys_mount+0x18f/0x230 [ 638.233114][ T1159] do_syscall_64+0x60/0xe0 [ 638.238328][ T1159] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 638.244731][ T1159] RIP: 0033:0x45cb19 [ 638.248620][ T1159] Code: Bad RIP value. [ 638.252662][ T1159] RSP: 002b:00007f317852ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 638.262019][ T1159] RAX: ffffffffffffffda RBX: 00000000004f7240 RCX: 000000000045cb19 [ 638.270516][ T1159] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 00000000200005c0 [ 638.278991][ T1159] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 638.287438][ T1159] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 638.295966][ T1159] R13: 0000000000000771 R14: 00000000004ca736 R15: 00007f317852f6d4 [ 638.306306][ T1159] [ 638.306306][ T1159] Showing all locks held in the system: [ 638.315471][ T1159] 3 locks held by kworker/u4:10/454: [ 638.320755][ T1159] #0: ffff8880ae635e58 (&rq->lock){-.-.}-{2:2}, at: newidle_balance+0x77f/0xe30 [ 638.330656][ T1159] #1: ffffffff89bc3180 (rcu_read_lock){....}-{1:2}, at: __update_idle_core+0x39/0x3e0 [ 638.341659][ T1159] #2: ffff8880ae625618 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x55/0x1a0 [ 638.351408][ T1159] 1 lock held by khungtaskd/1159: [ 638.356559][ T1159] #0: ffffffff89bc3180 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 638.366561][ T1159] 2 locks held by agetty/6726: [ 638.371330][ T1159] #0: ffff8880a7e11098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 638.381184][ T1159] #1: ffffc90000f502e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x223/0x1a30 [ 638.391405][ T1159] [ 638.395326][ T1159] ============================================= [ 638.395326][ T1159] [ 638.404392][ T1159] NMI backtrace for cpu 1 [ 638.408719][ T1159] CPU: 1 PID: 1159 Comm: khungtaskd Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 638.418233][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.428268][ T1159] Call Trace: [ 638.431541][ T1159] dump_stack+0x18f/0x20d [ 638.435850][ T1159] nmi_cpu_backtrace.cold+0x70/0xb1 [ 638.441030][ T1159] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 638.446641][ T1159] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 638.452598][ T1159] watchdog+0xd89/0xf30 [ 638.456732][ T1159] ? trace_sched_process_hang+0x2e0/0x2e0 [ 638.462428][ T1159] kthread+0x3b5/0x4a0 [ 638.466473][ T1159] ? __kthread_bind_mask+0xc0/0xc0 [ 638.471556][ T1159] ? __kthread_bind_mask+0xc0/0xc0 [ 638.476657][ T1159] ret_from_fork+0x1f/0x30 [ 638.481234][ T1159] Sending NMI from CPU 1 to CPUs 0: [ 638.486650][ C0] NMI backtrace for cpu 0 [ 638.486659][ C0] CPU: 0 PID: 3876 Comm: systemd-journal Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 638.486667][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.486671][ C0] RIP: 0033:0x7ffe8038c9ed [ 638.486674][ C0] Code: Bad RIP value. [ 638.486679][ C0] RSP: 002b:00007ffe80357778 EFLAGS: 00000246 [ 638.486689][ C0] RAX: 00000000d415a79a RBX: 0000000000000001 RCX: 0000000000000000 [ 638.486695][ C0] RDX: 0000000000000157 RSI: 00007ffe803577c0 RDI: 00007ffe80388080 [ 638.486701][ C0] RBP: 00007ffe80357790 R08: 000055b6cfa04710 R09: 00007ffe80388090 [ 638.486707][ C0] R10: 000000000001ea22 R11: 0000000000000246 R12: 00007ffe803577c0 [ 638.486714][ C0] R13: 0000000000000001 R14: 0000000000000001 R15: 0005a92df35d2a19 [ 638.486719][ C0] FS: 00007f970b4bd8c0 GS: 0000000000000000 [ 638.489904][ T1159] Kernel panic - not syncing: hung_task: blocked tasks [ 638.578044][ T1159] CPU: 1 PID: 1159 Comm: khungtaskd Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 638.587470][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.597511][ T1159] Call Trace: [ 638.600781][ T1159] dump_stack+0x18f/0x20d [ 638.605088][ T1159] panic+0x2e3/0x75c [ 638.608957][ T1159] ? __warn_printk+0xf3/0xf3 [ 638.613523][ T1159] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 638.619127][ T1159] ? preempt_schedule_thunk+0x16/0x18 [ 638.624473][ T1159] ? watchdog.cold+0x22d/0x24b [ 638.629209][ T1159] ? watchdog+0xc59/0xf30 [ 638.633517][ T1159] watchdog.cold+0x23e/0x24b [ 638.638098][ T1159] ? trace_sched_process_hang+0x2e0/0x2e0 [ 638.643793][ T1159] kthread+0x3b5/0x4a0 [ 638.647833][ T1159] ? __kthread_bind_mask+0xc0/0xc0 [ 638.652919][ T1159] ? __kthread_bind_mask+0xc0/0xc0 [ 638.658027][ T1159] ret_from_fork+0x1f/0x30 [ 638.663936][ T1159] Kernel Offset: disabled [ 638.668265][ T1159] Rebooting in 86400 seconds..