Device #0 now disconnected 11:46:29 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b00010000000009040000"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x50) 11:46:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:46:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'fscrypt:'}, &(0x7f0000000300)={0x0, "528f8922f898fdecccda075442178c09e441a4a692d8e1a615eaa4a17ee0f85d68032d40a85dcaf8f0158db2e3c44497ceee33dddbe0afc836ad10112082f45f"}, 0x48, r0) 11:46:29 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) [ 356.398902][ T9274] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 356.613838][ T9274] usb 3-1: device descriptor read/8, error -61 [ 356.669029][ T31] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 356.898738][ T9274] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 356.928767][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 357.080288][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.128892][ T9274] usb 3-1: device descriptor read/8, error -61 [ 357.248815][ T9274] usb usb3-port1: unable to enumerate USB device [ 357.259194][ T31] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 357.268348][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.276714][ T31] usb 1-1: Product: syz [ 357.281201][ T31] usb 1-1: Manufacturer: syz [ 357.285890][ T31] usb 1-1: SerialNumber: syz [ 357.292756][ T31] usb 1-1: config 0 descriptor?? [ 357.340284][ T31] ldusb 1-1:0.0: Interrupt in endpoint not found [ 357.545436][ T9779] usb 1-1: USB disconnect, device number 45 11:46:30 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) 11:46:30 executing program 1: openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:46:30 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:46:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:46:30 executing program 3: syz_read_part_table(0x0, 0x2, &(0x7f0000001400)=[{0x0}, {0x0, 0x0, 0x675}]) 11:46:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') read$eventfd(r0, 0x0, 0x0) [ 357.676061][T19189] loop3: detected capacity change from 6 to 0 11:46:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) [ 357.753593][T19189] Dev loop3: unable to read RDB block 6 [ 357.766385][T19189] loop3: unable to read partition table [ 357.773584][T19189] loop3: partition table beyond EOD, truncated [ 357.795527][T19189] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 11:46:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) [ 357.873182][T19189] loop3: detected capacity change from 6 to 0 [ 357.940038][T19189] Dev loop3: unable to read RDB block 6 [ 357.948126][T19189] loop3: unable to read partition table [ 357.972635][T19189] loop3: partition table beyond EOD, truncated [ 357.980568][ T9823] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 358.007843][T19189] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 11:46:31 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe800"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x50) 11:46:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x57, 0xf74}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:46:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x4c, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_MAP={0x24}, @IFLA_TARGET_NETNSID={0x8}]}, 0x4c}}, 0x0) 11:46:31 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) [ 358.169027][ T9823] usb 3-1: device descriptor read/64, error 18 [ 358.438713][ T9823] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 358.468922][ T31] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 358.628753][ T9823] usb 3-1: device descriptor read/64, error 18 [ 358.708653][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 358.748862][ T9823] usb usb3-port1: attempt power cycle [ 358.838844][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.849102][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.029565][ T31] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 359.038803][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.046772][ T31] usb 1-1: Product: syz [ 359.054153][ T31] usb 1-1: Manufacturer: syz [ 359.059679][ T31] usb 1-1: SerialNumber: syz [ 359.072775][ T31] usb 1-1: config 0 descriptor?? [ 359.110420][ T31] ldusb 1-1:0.0: Interrupt in endpoint not found [ 359.318814][ T19] usb 1-1: USB disconnect, device number 46 [ 359.458627][ T9823] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 359.628759][ T9823] usb 3-1: device descriptor read/8, error -61 [ 359.898703][ T9823] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 360.068675][ T9823] usb 3-1: device descriptor read/8, error -61 [ 360.188752][ T9823] usb usb3-port1: unable to enumerate USB device 11:46:33 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) 11:46:33 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/zero\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 11:46:33 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 11:46:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x57, 0xf74}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:46:33 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:46:33 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe800"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x50) [ 360.730458][T19260] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 11:46:33 executing program 3: getrusage(0xffffffffffffffff, &(0x7f0000000100)) 11:46:33 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x81602, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) 11:46:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x57, 0xf74}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:46:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @loopback}, 0x200000c8) 11:46:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x8, &(0x7f0000000000)={@multicast1, @multicast1}, 0x8) 11:46:33 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) [ 361.008810][ T19] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 361.085159][T19287] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 361.118495][T12103] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 361.278783][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 361.328552][T12103] usb 3-1: device descriptor read/64, error 18 [ 361.428915][ T19] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.439911][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.598490][T12103] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 361.638722][ T19] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 361.648339][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.658149][ T19] usb 1-1: Product: syz [ 361.663938][ T19] usb 1-1: Manufacturer: syz [ 361.669505][ T19] usb 1-1: SerialNumber: syz [ 361.675653][ T19] usb 1-1: config 0 descriptor?? [ 361.729814][ T19] ldusb 1-1:0.0: Interrupt in endpoint not found [ 361.788807][T12103] usb 3-1: device descriptor read/64, error 18 [ 361.908767][T12103] usb usb3-port1: attempt power cycle [ 361.931850][ T19] usb 1-1: USB disconnect, device number 47 [ 362.618496][T12103] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 362.788763][T12103] usb 3-1: device descriptor read/8, error -61 [ 363.058555][T12103] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 363.228709][T12103] usb 3-1: device descriptor read/8, error -61 [ 363.348560][T12103] usb usb3-port1: unable to enumerate USB device 11:46:36 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 11:46:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0x0, 0x57, 0xf74}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:46:36 executing program 3: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) socket(0x0, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 11:46:36 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0xe5, &(0x7f0000000340)=""/229, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 11:46:36 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:46:36 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe800"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x50) [ 363.806906][T19321] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 11:46:36 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000002d40), 0x10) 11:46:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0x0, 0x57, 0xf74}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) [ 364.005727][ T35] audit: type=1800 audit(1611834396.976:12): pid=19323 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16373 res=0 errno=0 11:46:37 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) [ 364.068575][ T7] usb 1-1: new high-speed USB device number 48 using dummy_hcd 11:46:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @private}}, 0x0, 0x0, 0x0, 0x0, "b02126926c4b0cfc1b092453a977d32a8a88a37e2cddbc6264a71c65c175c04bb119d76eb5eedcca4db2fd8e1003c79143723acca1e92e9be0af3c2ef23b1e28dffae77bee6ca655f300cfdea2c7bb2d"}, 0xd8) [ 364.128535][T12103] usb 3-1: new high-speed USB device number 26 using dummy_hcd 11:46:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x40, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000100)=0x100, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1c) creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, 0x0, 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) 11:46:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0x0, 0x57, 0xf74}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) [ 364.181601][T19348] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 364.308313][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 364.319834][T12103] usb 3-1: device descriptor read/64, error 18 [ 364.438850][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.478497][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 364.598369][T12103] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 364.678518][ T7] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 364.687716][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.696525][ T7] usb 1-1: Product: syz [ 364.701378][ T7] usb 1-1: Manufacturer: syz [ 364.706072][ T7] usb 1-1: SerialNumber: syz [ 364.726621][ T7] usb 1-1: config 0 descriptor?? [ 364.781948][ T7] ldusb 1-1:0.0: Interrupt in endpoint not found [ 364.808321][T12103] usb 3-1: device descriptor read/64, error 18 [ 364.928513][T12103] usb usb3-port1: attempt power cycle [ 364.981872][ T7] usb 1-1: USB disconnect, device number 48 [ 365.638396][T12103] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 365.808322][T12103] usb 3-1: device descriptor read/8, error -61 [ 366.078309][T12103] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 366.248302][T12103] usb 3-1: device descriptor read/8, error -61 [ 366.368487][T12103] usb usb3-port1: unable to enumerate USB device 11:46:39 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 11:46:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newnexthop={0x1c, 0x68, 0x813, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 11:46:39 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:46:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x0, 0xf74}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:46:39 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe800090587"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x50) 11:46:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x40, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000100)=0x100, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1c) creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, 0x0, 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) 11:46:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x40, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000100)=0x100, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1c) creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, 0x0, 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) [ 366.883504][T19396] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 11:46:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x0, 0xf74}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:46:40 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioprio_set$pid(0x2, r0, 0x2004) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x14000004, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x7, 0x2, 0xfffffffe, 0x9, 0x3f}) socket$inet_udplite(0x2, 0x2, 0x88) 11:46:40 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) [ 367.128290][T12103] usb 1-1: new high-speed USB device number 49 using dummy_hcd 11:46:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x0, 0xf74}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) [ 367.216317][T19418] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 367.228174][ T19] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 367.368171][T12103] usb 1-1: Using ep0 maxpacket: 32 11:46:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) [ 367.440064][ T19] usb 3-1: device descriptor read/64, error 18 11:46:40 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c00010062"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) [ 367.488846][T12103] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 367.642940][T19437] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 367.691241][T12103] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 367.714165][T12103] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.730098][ T19] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 367.754755][T12103] usb 1-1: Product: syz [ 367.768911][T12103] usb 1-1: Manufacturer: syz [ 367.782111][T12103] usb 1-1: SerialNumber: syz [ 367.801498][T12103] usb 1-1: config 0 descriptor?? [ 367.867906][T12103] ldusb 1-1:0.0: Interrupt in endpoint not found [ 367.918637][ T19] usb 3-1: device descriptor read/64, error 18 [ 368.038411][ T19] usb usb3-port1: attempt power cycle [ 368.074790][T12103] usb 1-1: USB disconnect, device number 49 [ 368.748153][ T19] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 368.918970][ T19] usb 3-1: device descriptor read/8, error -61 [ 369.188148][ T19] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 369.358276][ T19] usb 3-1: device descriptor read/8, error -61 [ 369.479187][ T19] usb usb3-port1: unable to enumerate USB device 11:46:42 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 11:46:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x40, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000100)=0x100, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1c) creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, 0x0, 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) 11:46:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:46:42 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c00010062"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:46:42 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioprio_set$pid(0x2, r0, 0x2004) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x14000004, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x7, 0x2, 0xfffffffe, 0x9, 0x3f}) socket$inet_udplite(0x2, 0x2, 0x88) 11:46:42 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe800090587"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x50) [ 369.960584][T19474] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 11:46:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:46:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)=0x100, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfd14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x2) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 11:46:43 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c00010062"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:46:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) r2 = syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) [ 370.228176][ T19] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 370.278358][T12103] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 370.360200][T19500] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 11:46:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)=0x100, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfd14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x2) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 11:46:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) r2 = syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) [ 370.468792][T12103] usb 3-1: device descriptor read/64, error 18 [ 370.488163][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 370.618954][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 370.769384][T12103] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 370.858229][ T19] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 370.874876][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.898119][ T19] usb 1-1: Product: syz [ 370.902319][ T19] usb 1-1: Manufacturer: syz [ 370.906919][ T19] usb 1-1: SerialNumber: syz [ 370.921434][ T19] usb 1-1: config 0 descriptor?? [ 370.958214][T12103] usb 3-1: device descriptor read/64, error 18 [ 370.971024][ T19] ldusb 1-1:0.0: Interrupt in endpoint not found [ 371.078613][T12103] usb usb3-port1: attempt power cycle [ 371.171565][ T9780] usb 1-1: USB disconnect, device number 50 [ 371.788014][T12103] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 371.958404][T12103] usb 3-1: device descriptor read/8, error -61 [ 372.228070][T12103] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 372.398751][T12103] usb 3-1: device descriptor read/8, error -61 [ 372.518076][T12103] usb usb3-port1: unable to enumerate USB device 11:46:45 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b"], 0x0) 11:46:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:46:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) r2 = syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:46:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)=0x100, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfd14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x2) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 11:46:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)=0x100, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfd14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x2) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 11:46:45 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe800090587"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x50) 11:46:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x1000) [ 373.158325][T19561] bond24: (slave bridge66): Enslaving as an active interface with an up link 11:46:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)=0x100, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfd14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x2) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 11:46:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)=0x100, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfd14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x2) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) [ 373.223671][T19587] bond24 (unregistering): (slave bridge66): Releasing backup interface [ 373.290542][ T9274] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 373.407973][ T9779] usb 3-1: new high-speed USB device number 38 using dummy_hcd 11:46:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x1000) [ 373.557906][ T9274] usb 1-1: Using ep0 maxpacket: 32 11:46:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)=0x100, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfd14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x2) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) [ 373.648617][T19587] bond24 (unregistering): Released all slaves [ 373.667908][ T9779] usb 3-1: Using ep0 maxpacket: 32 11:46:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)=0x100, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfd14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x2) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) [ 373.690609][ T9274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 373.792180][ T9779] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.812742][ T9779] usb 3-1: config 0 has no interfaces? [ 373.898408][ T9274] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 373.913583][ T9274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.931179][ T9274] usb 1-1: Product: syz [ 373.935389][ T9274] usb 1-1: Manufacturer: syz [ 373.957980][ T9274] usb 1-1: SerialNumber: syz [ 373.967398][ T9274] usb 1-1: config 0 descriptor?? [ 373.998440][ T9779] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 374.007543][ T9779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.019343][ T9274] ldusb 1-1:0.0: Interrupt in endpoint not found [ 374.053993][ T9779] usb 3-1: Product: syz [ 374.061933][ T9779] usb 3-1: Manufacturer: syz [ 374.074760][ T9779] usb 3-1: SerialNumber: syz [ 374.084270][ T9779] usb 3-1: config 0 descriptor?? [ 374.221437][ T9780] usb 1-1: USB disconnect, device number 51 [ 374.351777][ T9779] usb 3-1: USB disconnect, device number 38 11:46:47 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b"], 0x0) 11:46:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x1000) 11:46:47 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:46:47 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$key(0xf, 0x3, 0x2) splice(r1, 0x0, r0, &(0x7f0000000880)=0x4, 0x401, 0x9) r2 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00'}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 11:46:47 executing program 1: open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfd14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r0, 0x0, 0x800100020001) 11:46:47 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe80009058703"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x50) [ 374.953565][ T35] audit: type=1804 audit(1611834407.927:13): pid=19674 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir393875122/syzkaller.AG7OUQ/196/bus" dev="sda1" ino=16363 res=1 errno=0 11:46:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) [ 375.021477][ C0] net_ratelimit: 2 callbacks suppressed [ 375.021494][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 375.046527][ T35] audit: type=1804 audit(1611834407.997:14): pid=19674 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir393875122/syzkaller.AG7OUQ/196/bus" dev="sda1" ino=16363 res=1 errno=0 [ 375.113558][T19676] bond24: (slave bridge67): Enslaving as an active interface with an up link [ 375.133852][T19697] bond24 (unregistering): (slave bridge67): Releasing backup interface 11:46:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) [ 375.187991][ T9780] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 375.208160][ T9274] usb 3-1: new high-speed USB device number 39 using dummy_hcd 11:46:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) [ 375.438033][ T9780] usb 1-1: Using ep0 maxpacket: 32 [ 375.452718][ T35] audit: type=1804 audit(1611834408.427:15): pid=19674 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir393875122/syzkaller.AG7OUQ/196/bus" dev="sda1" ino=16363 res=1 errno=0 [ 375.458268][ T9274] usb 3-1: Using ep0 maxpacket: 32 [ 375.481323][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 11:46:48 executing program 1: open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfd14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r0, 0x0, 0x800100020001) 11:46:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, 0x0}, 0x1000) [ 375.555182][ T35] audit: type=1804 audit(1611834408.457:16): pid=19721 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir393875122/syzkaller.AG7OUQ/196/bus" dev="sda1" ino=16363 res=1 errno=0 [ 375.578731][ T9780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 375.616744][ T9780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 375.669099][ T9274] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.694269][ T9274] usb 3-1: config 0 has no interfaces? [ 375.706257][T19697] bond24 (unregistering): Released all slaves 11:46:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, 0x0}, 0x1000) [ 375.716126][ T35] audit: type=1804 audit(1611834408.627:17): pid=19745 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir393875122/syzkaller.AG7OUQ/197/bus" dev="sda1" ino=16383 res=1 errno=0 [ 375.751352][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 375.838213][ T9780] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 375.861700][ T35] audit: type=1804 audit(1611834408.717:18): pid=19747 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir393875122/syzkaller.AG7OUQ/197/bus" dev="sda1" ino=16383 res=1 errno=0 [ 375.904071][ T9780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.938247][ T9274] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 375.954299][ T9274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.968953][ T9780] usb 1-1: Product: syz [ 375.990067][ T9780] usb 1-1: Manufacturer: syz [ 376.002586][ T9274] usb 3-1: Product: syz [ 376.006872][ T9780] usb 1-1: SerialNumber: syz [ 376.027714][ T9274] usb 3-1: Manufacturer: syz [ 376.032369][ T9274] usb 3-1: SerialNumber: syz [ 376.050853][ T9780] usb 1-1: config 0 descriptor?? [ 376.089364][ T9780] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 376.109399][ T9274] usb 3-1: config 0 descriptor?? [ 376.158065][ T9780] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 376.290803][T19675] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 376.298889][ T9823] usb 1-1: USB disconnect, device number 52 [ 376.316054][ T9823] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 376.351784][ T9274] usb 3-1: USB disconnect, device number 39 11:46:49 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b"], 0x0) 11:46:49 executing program 3: socket(0x22, 0x0, 0x9) 11:46:49 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:46:49 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) write$qrtrtun(r0, 0x0, 0x0) 11:46:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, 0x0}, 0x1000) 11:46:49 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe80009058703"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x50) 11:46:50 executing program 1: syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc61, &(0x7f0000003340)=ANY=[]) 11:46:50 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 11:46:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={0x0}}, 0x1000) 11:46:50 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x5, &(0x7f00000015c0)=[{&(0x7f00000002c0)=',', 0x1}, {&(0x7f0000000300)="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", 0xd01}, {&(0x7f0000001300)="dc", 0x1}, {&(0x7f00000013c0)="da", 0x1, 0xffffffffffffff01}, {0x0}], 0x0, 0x0) [ 377.123485][T19852] bond24: (slave bridge68): Enslaving as an active interface with an up link [ 377.207439][T19828] bond24 (unregistering): (slave bridge68): Releasing backup interface [ 377.249001][ T9823] usb 1-1: new high-speed USB device number 53 using dummy_hcd 11:46:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 11:46:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={0x0}}, 0x1000) [ 377.298875][T19882] loop3: detected capacity change from 16383 to 0 [ 377.328819][T12103] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 377.500235][ T9823] usb 1-1: Using ep0 maxpacket: 32 [ 377.535403][T19828] bond24 (unregistering): Released all slaves [ 377.578788][T12103] usb 3-1: Using ep0 maxpacket: 32 [ 377.628088][ T9823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 377.652438][ T9823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 377.718138][T12103] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.736593][T12103] usb 3-1: config 0 has no interfaces? [ 377.827812][ T9823] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 377.837163][ T9823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.847109][ T9823] usb 1-1: Product: syz [ 377.852562][ T9823] usb 1-1: Manufacturer: syz [ 377.857297][ T9823] usb 1-1: SerialNumber: syz [ 377.865248][ T9823] usb 1-1: config 0 descriptor?? [ 377.907846][T12103] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 377.916918][T12103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.926949][T12103] usb 3-1: Product: syz [ 377.932878][ T9823] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 377.942568][T12103] usb 3-1: Manufacturer: syz [ 377.947177][T12103] usb 3-1: SerialNumber: syz [ 377.966408][ T9823] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 377.989918][T12103] usb 3-1: config 0 descriptor?? [ 378.134431][T19829] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 378.142794][ T31] usb 1-1: USB disconnect, device number 53 [ 378.163445][ T31] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 378.233255][ T9274] usb 3-1: USB disconnect, device number 40 11:46:51 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001"], 0x0) 11:46:51 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) 11:46:51 executing program 1: syz_io_uring_setup(0x3079, &(0x7f0000000380), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 11:46:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={0x0}}, 0x1000) 11:46:51 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:46:51 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe80009058703"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x50) 11:46:51 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="61b3944f1f51"}, @isdn, @in={0x2, 0x0, @dev}}) 11:46:52 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x4, &(0x7f0000000800)=[{&(0x7f0000000440)="f2", 0x1}, {&(0x7f0000000700)='t', 0x1, 0xffffffffffffff80}, {&(0x7f0000000740)='Y', 0x1, 0x76f7}, {&(0x7f00000007c0)="c8", 0x1, 0xffffffff}], 0x0, 0x0) 11:46:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) [ 379.017184][T19969] bond24: (slave bridge69): Enslaving as an active interface with an up link 11:46:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x2c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7, 0x4, 0x0, 0x7, 0x6, 0x2], 0x0, 0x2}, {0x0, [0x1, 0x6, 0x4, 0x1, 0x4], 0x6, 0x5}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x5, "0185", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x189800, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f00000005c0)) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x243000, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x0) accept4(r0, 0x0, 0x0, 0x800) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ocfs2_control\x00', 0xc120, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) [ 379.059883][T20005] bond24 (unregistering): (slave bridge69): Releasing backup interface [ 379.079915][ T9274] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 379.136298][T20023] loop1: detected capacity change from 264192 to 0 [ 379.171645][T20029] x_tables: duplicate underflow at hook 2 [ 379.207847][ T9823] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 379.238387][T20023] loop1: detected capacity change from 264192 to 0 [ 379.279682][T20005] bond24 (unregistering): Released all slaves [ 379.281583][T20029] x_tables: duplicate underflow at hook 2 [ 379.347593][ T9274] usb 1-1: Using ep0 maxpacket: 32 11:46:52 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:46:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x189800, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x1) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f00000005c0)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="28008363cfcf", @ANYBLOB="000127bd00000000", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8851) accept4(r0, 0x0, 0x0, 0x800) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000540)={0x1, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000580)={0x4b7, r2}) socket$inet_dccp(0x2, 0x6, 0x0) [ 379.447576][ T9823] usb 3-1: Using ep0 maxpacket: 32 [ 379.487999][ T9274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 379.514818][ T9274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 379.567916][ T9823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.609261][ T9823] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 379.648838][T20111] bond24: (slave bridge70): Enslaving as an active interface with an up link [ 379.677698][T20079] bond24 (unregistering): (slave bridge70): Releasing backup interface [ 379.718155][ T9274] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 379.730628][ T9274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.757082][ T9274] usb 1-1: Product: syz [ 379.767143][ T9274] usb 1-1: Manufacturer: syz [ 379.777766][ T9274] usb 1-1: SerialNumber: syz [ 379.786486][ T9274] usb 1-1: config 0 descriptor?? [ 379.839212][ T9274] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 379.847924][ T9823] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 379.863602][ T9274] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 379.878627][T20079] bond24 (unregistering): Released all slaves [ 379.883244][ T9823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.919808][ T9823] usb 3-1: Product: syz [ 379.939630][ T9823] usb 3-1: Manufacturer: syz [ 379.961561][ T9823] usb 3-1: SerialNumber: syz [ 379.983044][ T9823] usb 3-1: config 0 descriptor?? [ 380.032625][ T9823] ldusb 3-1:0.0: Interrupt in endpoint not found [ 380.041203][T19964] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 380.049839][ T9274] usb 1-1: USB disconnect, device number 54 [ 380.060579][ T9274] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 380.233819][ T31] usb 3-1: USB disconnect, device number 41 11:46:53 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001"], 0x0) 11:46:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:46:53 executing program 3: perf_event_open$cgroup(&(0x7f0000002100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71a81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:46:53 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:46:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000008580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0) 11:46:53 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x50) 11:46:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4020940d, 0x0) 11:46:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', 0x0, 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f0000001680)={[{@uni_xlate='uni_xlate=1'}]}) [ 380.952008][T20204] bond24: (slave bridge71): Enslaving as an active interface with an up link 11:46:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:46:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@rodir='rodir'}]}) [ 381.014266][T20246] bond24 (unregistering): (slave bridge71): Releasing backup interface 11:46:54 executing program 3: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r0) [ 381.127776][ T31] usb 1-1: new high-speed USB device number 55 using dummy_hcd 11:46:54 executing program 3: add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) [ 381.237536][ T9823] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 381.256102][T20268] FAT-fs (loop1): bogus number of reserved sectors [ 381.290659][T20268] FAT-fs (loop1): Can't find a valid FAT filesystem [ 381.340821][T20246] bond24 (unregistering): Released all slaves [ 381.375469][T20268] FAT-fs (loop1): bogus number of reserved sectors [ 381.382281][T20268] FAT-fs (loop1): Can't find a valid FAT filesystem [ 381.387595][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 381.487714][ T9823] usb 3-1: Using ep0 maxpacket: 32 [ 381.523178][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 381.613779][ T9823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.625158][ T9823] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 381.739866][ T31] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 381.748960][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.756962][ T31] usb 1-1: Product: syz [ 381.764994][ T31] usb 1-1: Manufacturer: syz [ 381.770606][ T31] usb 1-1: SerialNumber: syz [ 381.776830][ T31] usb 1-1: config 0 descriptor?? [ 381.797924][ T9823] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 381.807201][ T9823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.816783][ T9823] usb 3-1: Product: syz [ 381.821660][ T9823] usb 3-1: Manufacturer: syz [ 381.826324][ T9823] usb 3-1: SerialNumber: syz [ 381.834536][ T9823] usb 3-1: config 0 descriptor?? [ 381.838781][ T31] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 381.866422][ T31] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 381.888922][ T9823] ldusb 3-1:0.0: Interrupt in endpoint not found [ 382.041750][ T9823] usb 1-1: USB disconnect, device number 55 [ 382.072338][ T9823] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 382.097923][ T31] usb 3-1: USB disconnect, device number 42 11:46:55 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001"], 0x0) 11:46:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x0, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:46:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002540)={[{@shortname_lower='shortname=lower'}]}) 11:46:55 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:46:55 executing program 1: openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,u']) 11:46:55 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x50) [ 382.709581][T20357] fuse: Unknown parameter '0xffffffffffffffff' [ 382.717562][T20359] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 382.733834][T20360] FAT-fs (loop3): bogus number of reserved sectors [ 382.789553][T20360] FAT-fs (loop3): Can't find a valid FAT filesystem [ 382.822954][T20359] bond24 (unregistering): Released all slaves 11:46:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="97"], 0x14}}, 0x0) 11:46:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x0, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) [ 382.904915][T20360] FAT-fs (loop3): bogus number of reserved sectors [ 382.934057][T20360] FAT-fs (loop3): Can't find a valid FAT filesystem 11:46:55 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) [ 382.957566][ T9774] usb 1-1: new high-speed USB device number 56 using dummy_hcd 11:46:56 executing program 3: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000002300), 0xffffffffffffff1b) [ 383.017626][ T31] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 383.085023][T20446] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:46:56 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='projid_map\x00') 11:46:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x0, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) [ 383.166619][T20446] bond24: (slave bridge72): Enslaving as an active interface with an up link [ 383.207553][ T9774] usb 1-1: Using ep0 maxpacket: 32 [ 383.239905][T20446] bond24 (unregistering): (slave bridge72): Releasing backup interface [ 383.257525][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 383.328298][ T9774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 383.382494][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.406011][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 383.505798][T20446] bond24 (unregistering): Released all slaves [ 383.538151][ T9774] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 383.547238][ T9774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.591860][ T31] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 383.603927][ T9774] usb 1-1: Product: syz [ 383.610654][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.627394][ T9774] usb 1-1: Manufacturer: syz [ 383.632026][ T9774] usb 1-1: SerialNumber: syz [ 383.640713][ T31] usb 3-1: Product: syz [ 383.644996][ T31] usb 3-1: Manufacturer: syz [ 383.652519][ T31] usb 3-1: SerialNumber: syz [ 383.665078][ T9774] usb 1-1: config 0 descriptor?? [ 383.689226][ T31] usb 3-1: config 0 descriptor?? [ 383.719321][ T9774] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 383.732563][ T31] ldusb 3-1:0.0: Interrupt in endpoint not found [ 383.752088][ T9774] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 383.921335][ T9823] usb 1-1: USB disconnect, device number 56 [ 383.936228][ T9774] usb 3-1: USB disconnect, device number 43 [ 383.943562][ T9823] ldusb 1-1:0.0: LD USB Device #0 now disconnected 11:46:57 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe80009"], 0x0) 11:46:57 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L+'}, 0x16, 0x0) 11:46:57 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000380)={0x77359400}, 0x10) 11:46:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x70bd2d, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:46:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:46:57 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x50) 11:46:57 executing program 1: syz_usb_connect$cdc_ncm(0x5, 0x73, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x0, 0x20, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x0, 0x3ff}, {0x6, 0x24, 0x1a, 0x0, 0x35}, [@call_mgmt={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x40, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x40, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x7}}}}}}}]}}, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@fixed}) [ 384.557673][T20570] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:46:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 11:46:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@numtail='nonumtail=0'}, {@shortname_winnt='shortname=winnt'}]}) 11:46:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x70bd2d, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) [ 384.762722][T20577] bond24: (slave bridge73): Enslaving as an active interface with an up link [ 384.770044][T20620] FAT-fs (loop3): bogus number of reserved sectors [ 384.779564][T20620] FAT-fs (loop3): Can't find a valid FAT filesystem [ 384.804868][T20603] bond24 (unregistering): (slave bridge73): Releasing backup interface [ 384.813789][ T9774] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 384.869173][T20620] FAT-fs (loop3): bogus number of reserved sectors [ 384.875724][T20620] FAT-fs (loop3): Can't find a valid FAT filesystem [ 384.887469][ T9823] usb 3-1: new high-speed USB device number 44 using dummy_hcd 11:46:58 executing program 3: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 11:46:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x70bd2d, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) [ 384.997444][T12103] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 385.050776][T20603] bond24 (unregistering): Released all slaves [ 385.060111][ T9774] usb 1-1: Using ep0 maxpacket: 32 [ 385.137407][ T9823] usb 3-1: Using ep0 maxpacket: 32 [ 385.177541][ T9774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 385.259423][ T9823] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 385.347654][ T9774] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 385.358754][ T9774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.367819][T12103] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 385.378923][ T9774] usb 1-1: Product: syz [ 385.378941][ T9774] usb 1-1: Manufacturer: syz [ 385.392417][T12103] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.402044][ T9774] usb 1-1: SerialNumber: syz [ 385.429253][ T9774] usb 1-1: config 0 descriptor?? [ 385.436079][T12103] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 385.468166][ T9823] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 385.469351][ T9774] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 385.477747][ T9823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.505965][ T9823] usb 3-1: Product: syz [ 385.513027][ T9823] usb 3-1: Manufacturer: syz [ 385.523584][ T9823] usb 3-1: SerialNumber: syz [ 385.534908][ T9774] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 385.536042][ T9823] usb 3-1: config 0 descriptor?? [ 385.598863][ T9823] ldusb 3-1:0.0: Interrupt in endpoint not found [ 385.624077][T12103] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 385.633532][T12103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.646694][T12103] usb 2-1: Product: syz [ 385.651934][T12103] usb 2-1: Manufacturer: syz [ 385.656522][T12103] usb 2-1: SerialNumber: syz [ 385.672877][ T9774] usb 1-1: USB disconnect, device number 57 [ 385.698194][ T9774] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 385.802035][ T7] usb 3-1: USB disconnect, device number 44 [ 385.947640][T12103] cdc_ncm 2-1:1.0: bind() failure [ 385.955096][T12103] cdc_ncm 2-1:1.1: bind() failure [ 385.973822][T12103] usb 2-1: USB disconnect, device number 56 11:46:59 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe80009"], 0x0) 11:46:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}]}, 0x34}}, 0x1000) 11:46:59 executing program 3: io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0), 0x8}) 11:46:59 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:46:59 executing program 0: wait4(0x0, 0x0, 0x0, &(0x7f0000000200)) [ 386.376148][T20730] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:46:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') [ 386.499447][T20730] bond24: (slave bridge74): Enslaving as an active interface with an up link [ 386.550758][T20769] bond24 (unregistering): (slave bridge74): Releasing backup interface [ 386.667319][ T31] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 386.688412][T12103] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 386.794687][T20769] bond24 (unregistering): Released all slaves [ 386.937325][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 387.057312][T12103] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 387.067437][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 387.068687][T12103] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.095206][T12103] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 387.267327][T12103] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 387.276396][T12103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.287342][ T31] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 387.291983][T12103] usb 2-1: Product: syz [ 387.296383][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.301782][T12103] usb 2-1: Manufacturer: syz [ 387.314910][ T31] usb 3-1: Product: syz [ 387.317252][T12103] usb 2-1: SerialNumber: syz [ 387.322012][ T31] usb 3-1: Manufacturer: syz [ 387.328603][ T31] usb 3-1: SerialNumber: syz [ 387.355046][ T31] usb 3-1: config 0 descriptor?? [ 387.398807][ T31] ldusb 3-1:0.0: Interrupt in endpoint not found 11:47:00 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x189800, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) 11:47:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x5421, &(0x7f0000000080)) 11:47:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}]}, 0x34}}, 0x1000) 11:47:00 executing program 3: request_key(&(0x7f0000000180)='blacklist\x00', 0x0, 0x0, 0xfffffffffffffff9) 11:47:00 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) [ 387.613492][ T9780] usb 3-1: USB disconnect, device number 45 [ 387.615658][T12103] cdc_ncm 2-1:1.0: bind() failure [ 387.655785][T12103] cdc_ncm 2-1:1.1: bind() failure 11:47:00 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000240)=""/219, 0xdb) [ 387.694653][T20840] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 387.721554][T12103] usb 2-1: USB disconnect, device number 57 [ 387.896511][T20847] bond24: (slave bridge75): Enslaving as an active interface with an up link [ 387.944281][T20855] bond24 (unregistering): (slave bridge75): Releasing backup interface 11:47:01 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe80009"], 0x0) 11:47:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)) 11:47:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}]}, 0x34}}, 0x1000) 11:47:01 executing program 3: bpf$OBJ_PIN_PROG(0x6, &(0x7f00000006c0)={0x0}, 0x10) [ 388.158649][T20855] bond24 (unregistering): Released all slaves 11:47:01 executing program 0: socket(0x1, 0x0, 0xfffffffa) 11:47:01 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x0, @sdr}) 11:47:01 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 11:47:01 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5}]}, 0x3c}}, 0x1000) 11:47:01 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) 11:47:01 executing program 1: epoll_create(0x4e) 11:47:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002400)=ANY=[@ANYBLOB="97"], 0x14}}, 0x0) [ 388.493034][T20955] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 388.537323][ T9780] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 388.643725][T20958] bond24: (slave bridge76): Enslaving as an active interface with an up link [ 388.710536][T20984] bond24 (unregistering): (slave bridge76): Releasing backup interface [ 388.817113][ T9780] usb 3-1: Using ep0 maxpacket: 32 [ 388.937449][ T9780] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 388.948131][T20984] bond24 (unregistering): Released all slaves [ 389.137662][ T9780] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 389.146824][ T9780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.155745][ T9780] usb 3-1: Product: syz [ 389.160335][ T9780] usb 3-1: Manufacturer: syz [ 389.164939][ T9780] usb 3-1: SerialNumber: syz [ 389.177461][ T9780] usb 3-1: config 0 descriptor?? [ 389.218705][ T9780] ldusb 3-1:0.0: Interrupt in endpoint not found [ 389.425260][ T9780] usb 3-1: USB disconnect, device number 46 11:47:02 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe80009058703"], 0x0) 11:47:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5}]}, 0x3c}}, 0x1000) 11:47:02 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000020c0)={'team0\x00'}) 11:47:02 executing program 0: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000004c0), 0x8) 11:47:02 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f00000015c0)=[{&(0x7f0000000300)="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", 0x1fc, 0x4}], 0x0, 0x0) 11:47:02 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:47:03 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 390.042464][T21063] loop1: detected capacity change from 1 to 0 [ 390.049082][T21062] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:03 executing program 0: syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd']) 11:47:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5}]}, 0x3c}}, 0x1000) 11:47:03 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:47:03 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) [ 390.325231][T21081] fuse: Bad value for 'fd' 11:47:03 executing program 3: add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) [ 390.357393][T12103] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 390.386588][T21081] fuse: Bad value for 'fd' [ 390.414034][T21086] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 390.617051][T12103] usb 3-1: Using ep0 maxpacket: 32 [ 390.747461][T12103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 390.758591][T12103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 390.937271][T12103] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 390.946388][T12103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.955342][T12103] usb 3-1: Product: syz [ 390.959982][T12103] usb 3-1: Manufacturer: syz [ 390.964586][T12103] usb 3-1: SerialNumber: syz [ 390.972522][T12103] usb 3-1: config 0 descriptor?? [ 391.029026][T12103] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 391.042132][T12103] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 391.230755][T12103] usb 3-1: USB disconnect, device number 47 [ 391.240300][T12103] ldusb 3-1:0.0: LD USB Device #0 now disconnected 11:47:04 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe8000905"], 0x0) 11:47:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}}, 0x1000) 11:47:04 executing program 1: socketpair(0x3, 0x0, 0x0, &(0x7f0000000100)) 11:47:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x5452, &(0x7f0000000080)) 11:47:04 executing program 3: io_setup(0xe7b1, &(0x7f0000000540)=0x0) io_destroy(r0) 11:47:04 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) [ 391.800910][T21125] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:04 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') 11:47:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x189800, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x1) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f00000005c0)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="28008363cfcf591d77fbe8", @ANYRES16=0x0, @ANYBLOB="000127bd00000000df2501", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8851) accept4(r0, 0x0, 0x0, 0x800) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000540)) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) accept4(r2, &(0x7f0000000680)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0xc00) 11:47:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}}, 0x1000) 11:47:04 executing program 1: clock_gettime(0x0, &(0x7f0000001680)) 11:47:04 executing program 3: syz_io_uring_setup(0x6204, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 11:47:05 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) [ 392.137462][ T9823] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 392.164484][T21160] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 392.214805][T21160] bond24 (uninitialized): Released all slaves [ 392.388378][ T9823] usb 3-1: Using ep0 maxpacket: 32 [ 392.518291][ T9823] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 392.697104][ T9823] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 392.706220][ T9823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.717417][ T9823] usb 3-1: Product: syz [ 392.721619][ T9823] usb 3-1: Manufacturer: syz [ 392.726209][ T9823] usb 3-1: SerialNumber: syz [ 392.735168][ T9823] usb 3-1: config 0 descriptor?? [ 392.788518][ T9823] ldusb 3-1:0.0: Interrupt in endpoint not found [ 392.998588][T12103] usb 3-1: USB disconnect, device number 48 11:47:06 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe8000905"], 0x0) 11:47:06 executing program 3: r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f0000000080)) 11:47:06 executing program 1: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000500)={0x0, 0x1f, 0x800, 0x8, 0x19, "4f5898cd4a1a4cd6"}) io_setup(0xe7b1, &(0x7f0000000540)) select(0x40, &(0x7f0000004040)={0x6c8d, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000004080)={0xfd0, 0x48f914bf, 0xffffffff7fffffff, 0x2, 0x98, 0x401, 0x20, 0x7fff}, 0x0, &(0x7f0000004140)) 11:47:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}}, 0x1000) 11:47:06 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ptmx\x00', 0x0, 0x0) 11:47:06 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) [ 393.602637][T21198] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f000000bf40)={0x0, 0x0, &(0x7f000000bf00)={&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x20}}, 0x0) [ 393.654059][T21198] bond24 (uninitialized): Released all slaves 11:47:06 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40, 0x0) 11:47:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:47:06 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x3, 0xffffffffffffffff, 0x5) 11:47:06 executing program 3: openat$ppp(0xffffffffffffff9c, 0x0, 0x400200, 0x0) 11:47:06 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/btrfs-control\x00', 0x204100, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, 0x0) [ 393.956991][ T31] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 394.207036][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 394.327290][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 394.497009][ T31] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 394.507188][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.515377][ T31] usb 3-1: Product: syz [ 394.520581][ T31] usb 3-1: Manufacturer: syz [ 394.525194][ T31] usb 3-1: SerialNumber: syz [ 394.535067][ T31] usb 3-1: config 0 descriptor?? [ 394.578470][ T31] ldusb 3-1:0.0: Interrupt in endpoint not found [ 394.781235][ T9823] usb 3-1: USB disconnect, device number 49 11:47:08 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe8000905"], 0x0) 11:47:08 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:47:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:47:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x49, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x40305829, 0x0) 11:47:08 executing program 1: bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0), 0x10) 11:47:08 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f00000000c0)) [ 395.375615][T21252] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:08 executing program 3: syz_mount_image$nfs(&(0x7f0000000300)='nfs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[], [{@subj_user={'subj_user', 0x3d, 'user_linkup\x00'}}]}) 11:47:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:47:08 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x3, &(0x7f0000000800)=[{&(0x7f0000000440)="f2", 0x1}, {&(0x7f0000000740)='Y', 0x1, 0x76f7}, {&(0x7f00000007c0)="c8", 0x1}], 0x0, 0x0) 11:47:08 executing program 1: socket$caif_seqpacket(0x25, 0x5, 0x4) [ 395.437605][T21252] bond24 (uninitialized): Released all slaves 11:47:08 executing program 1: syz_io_uring_setup(0x206ff4, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) 11:47:08 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) [ 395.617211][T21268] nfs: Unknown parameter 'subj_user' [ 395.631843][T21271] loop0: detected capacity change from 118 to 0 [ 395.719306][ T31] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 395.994640][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 396.126967][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 396.327013][ T31] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 396.336178][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.346335][ T31] usb 3-1: Product: syz [ 396.352340][ T31] usb 3-1: Manufacturer: syz [ 396.358777][ T31] usb 3-1: SerialNumber: syz [ 396.372758][ T31] usb 3-1: config 0 descriptor?? [ 396.428425][ T31] ldusb 3-1:0.0: Interrupt in endpoint not found [ 396.634570][ T31] usb 3-1: USB disconnect, device number 50 11:47:10 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe800090587"], 0x0) 11:47:10 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x58e}]) 11:47:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}}, 0x1000) 11:47:10 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/btrfs-control\x00', 0x204100, 0x0) 11:47:10 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 11:47:10 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:10 executing program 0: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000500)={0x4, 0x1f, 0x800, 0x8, 0x19, "4f5898cd4a1a4cd6"}) io_setup(0xe7b1, &(0x7f0000000540)=0x0) io_destroy(r0) [ 397.251896][T21315] loop3: detected capacity change from 5 to 0 11:47:10 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:10 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x0, 0x10, r0, 0x82000000) [ 397.325610][T21315] Dev loop3: unable to read RDB block 5 [ 397.333065][T21315] loop3: unable to read partition table [ 397.342539][T21315] loop3: partition table beyond EOD, truncated [ 397.360302][T21315] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 11:47:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}}, 0x1000) 11:47:10 executing program 1: r0 = request_key(0x0, 0x0, &(0x7f0000000140)='ci\xce\x00\x00\x8f\x04h\xb1=\xcb\x00\x02m\xe5p', 0xfffffffffffffffc) r1 = request_key(0x0, 0x0, &(0x7f0000000200)='#\x00ao\xed\xd2\xfcs\v%\xdf\xb0x\r\xd7\xc86\x01\x00vY\x96*`\xba\x97\xfc\xff5\xc0)\xc9\xce\xbfm\xd9\x00', r0) r2 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, r1) add_key(&(0x7f0000000880)='dns_resolver\x00', &(0x7f00000008c0)={'syz', 0x0}, 0x0, 0x0, r2) r3 = add_key$fscrypt_v1(0x0, &(0x7f00000003c0)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000400)={0x0, "19afe8573b8f379642c3e3e3d3dfaca1a2807640f3ae380669e20f18fd5587911c8414faffedd02b7c262092a04d69f7d2d687b23ca755c7bbe7e7292de919c8"}, 0x48, 0x0) add_key(&(0x7f0000000480)='cifs.idmap\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="1e4af5eba5346834583facdd3dd0ba9a0ab48608a94880f957c2cf6e6c6792edceb92f0c62e20739d28b3ed2a995", 0x2e, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r1) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(0x0, &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r3) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x1fe2, 0x0, 0x2, 0x269}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) [ 397.433305][T21315] loop3: detected capacity change from 5 to 0 [ 397.479790][T21315] Dev loop3: unable to read RDB block 5 [ 397.489371][T21315] loop3: unable to read partition table [ 397.499602][T21315] loop3: partition table beyond EOD, truncated [ 397.505807][T21315] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 11:47:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}}, 0x1000) [ 397.558452][ T31] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 397.796714][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 397.917323][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 398.086864][ T31] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 398.096794][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.104793][ T31] usb 3-1: Product: syz [ 398.110003][ T31] usb 3-1: Manufacturer: syz [ 398.114674][ T31] usb 3-1: SerialNumber: syz [ 398.123842][ T31] usb 3-1: config 0 descriptor?? [ 398.178504][ T31] ldusb 3-1:0.0: Interrupt in endpoint not found [ 398.383746][T12103] usb 3-1: USB disconnect, device number 51 11:47:11 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe800090587"], 0x0) 11:47:11 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f00000012c0)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/14, 0xe}], 0x3, &(0x7f0000001980)=[{&(0x7f0000001340)=""/220, 0xdc}], 0x1, 0x0) 11:47:11 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 11:47:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:47:11 executing program 1: r0 = request_key(0x0, 0x0, &(0x7f0000000140)='ci\xce\x00\x00\x8f\x04h\xb1=\xcb\x00\x02m\xe5p', 0xfffffffffffffffc) r1 = request_key(0x0, 0x0, &(0x7f0000000200)='#\x00ao\xed\xd2\xfcs\v%\xdf\xb0x\r\xd7\xc86\x01\x00vY\x96*`\xba\x97\xfc\xff5\xc0)\xc9\xce\xbfm\xd9\x00', r0) r2 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, r1) add_key(&(0x7f0000000880)='dns_resolver\x00', &(0x7f00000008c0)={'syz', 0x0}, 0x0, 0x0, r2) r3 = add_key$fscrypt_v1(0x0, &(0x7f00000003c0)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000400)={0x0, "19afe8573b8f379642c3e3e3d3dfaca1a2807640f3ae380669e20f18fd5587911c8414faffedd02b7c262092a04d69f7d2d687b23ca755c7bbe7e7292de919c8"}, 0x48, 0x0) add_key(&(0x7f0000000480)='cifs.idmap\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="1e4af5eba5346834583facdd3dd0ba9a0ab48608a94880f957c2cf6e6c6792edceb92f0c62e20739d28b3ed2a995", 0x2e, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r1) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(0x0, &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r3) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x1fe2, 0x0, 0x2, 0x269}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) 11:47:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:12 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) 11:47:12 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001580)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x24) 11:47:12 executing program 1: select(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000300), 0x0) 11:47:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:47:12 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:12 executing program 3: io_destroy(0x0) io_setup(0x8, &(0x7f0000001700)=0x0) io_cancel(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 399.336697][ T9823] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 399.586710][ T9823] usb 3-1: Using ep0 maxpacket: 32 [ 399.737143][ T9823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 399.946852][ T9823] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 399.955930][ T9823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.967499][ T9823] usb 3-1: Product: syz [ 399.971684][ T9823] usb 3-1: Manufacturer: syz [ 399.976319][ T9823] usb 3-1: SerialNumber: syz [ 399.983857][ T9823] usb 3-1: config 0 descriptor?? [ 400.028476][ T9823] ldusb 3-1:0.0: Interrupt in endpoint not found [ 400.231307][ T31] usb 3-1: USB disconnect, device number 52 11:47:13 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe800090587"], 0x0) 11:47:13 executing program 0: syz_io_uring_setup(0x6204, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x269}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 11:47:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x1000) 11:47:13 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000240)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}) 11:47:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:13 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 11:47:13 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/btrfs-control\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 11:47:13 executing program 3: syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=']) 11:47:13 executing program 0: syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[]) 11:47:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}}, 0x1000) 11:47:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100085060080", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:14 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4000, 0x0) [ 401.037871][T21462] fuse: Bad value for 'fd' [ 401.056124][T21462] fuse: Bad value for 'fd' [ 401.094546][T21467] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 401.116563][ T9823] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 401.357934][ T9823] usb 3-1: Using ep0 maxpacket: 32 [ 401.476909][ T9823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 401.646959][ T9823] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 401.656144][ T9823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.665240][ T9823] usb 3-1: Product: syz [ 401.670008][ T9823] usb 3-1: Manufacturer: syz [ 401.674698][ T9823] usb 3-1: SerialNumber: syz [ 401.683691][ T9823] usb 3-1: config 0 descriptor?? [ 401.728042][ T9823] ldusb 3-1:0.0: Interrupt in endpoint not found [ 401.934406][ T9823] usb 3-1: USB disconnect, device number 53 11:47:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x2c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "0185"}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) 11:47:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100085060080", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:15 executing program 3: keyctl$assume_authority(0x10, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 11:47:15 executing program 1: semtimedop(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0) 11:47:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}}, 0x1000) 11:47:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x2, &(0x7f0000000380)=@raw=[@map={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 402.506160][T21499] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 402.530063][T21501] x_tables: duplicate underflow at hook 2 11:47:15 executing program 1: r0 = semget$private(0x0, 0xb, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 11:47:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x2, &(0x7f0000000380)=@raw=[@map={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0xe7, &(0x7f0000000400)=""/231, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:47:15 executing program 0: add_key(&(0x7f0000000480)='cifs.idmap\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="1e4af5eba5346834583facdd3dd0ba9a0ab48608a94880f957c2cf6e6c6792edce", 0x21, 0xffffffffffffffff) 11:47:15 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 11:47:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}}, 0x1000) 11:47:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100085060080", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:15 executing program 1: socket(0x1, 0x0, 0x8) 11:47:15 executing program 0: perf_event_open$cgroup(&(0x7f0000002300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:47:15 executing program 3: add_key(&(0x7f0000000480)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0) 11:47:15 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) 11:47:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}}, 0x1000) [ 402.883595][T21528] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:15 executing program 1: request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='/dev/full\x00', 0x0) 11:47:15 executing program 0: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x2, &(0x7f0000000380)=@raw=[@map={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f00000003c0)='syzkaller\x00', 0x6f7, 0xe7, &(0x7f0000000400)=""/231, 0x41000, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_open_procfs(0xffffffffffffffff, 0x0) 11:47:15 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 11:47:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0)={'team0\x00'}) 11:47:16 executing program 3: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0) 11:47:16 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000850600802000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:16 executing program 1: openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0xc0001, 0x0) 11:47:16 executing program 0: request_key(&(0x7f0000000a00)='.dead\x00', 0x0, 0x0, 0x0) 11:47:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}}, 0x1000) 11:47:16 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) [ 403.291651][T21559] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:16 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f0000000080)) 11:47:16 executing program 1: socketpair(0x39, 0x0, 0x0, &(0x7f00000000c0)) 11:47:16 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[], [{@dont_appraise='dont_appraise'}]}) 11:47:16 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000105c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) 11:47:16 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/uts\x00') 11:47:16 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000850600802000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x2c}}, 0x1000) 11:47:16 executing program 3: socket(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x0) 11:47:16 executing program 1: request_key(0x0, 0x0, 0x0, 0xfffffffffffffff9) 11:47:16 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7) [ 403.673688][T21587] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:16 executing program 0: mount$fuse(0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0) 11:47:16 executing program 1: syz_io_uring_setup(0x6204, &(0x7f0000000000), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 11:47:16 executing program 2: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000400)={0x0, 0x6, 0x0}) io_setup(0xe7b1, &(0x7f0000000540)=0x0) io_destroy(r0) 11:47:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x2c}}, 0x1000) 11:47:16 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), 0x0) 11:47:16 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/btrfs-control\x00', 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x10, r0, 0x0) 11:47:16 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000850600802000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:16 executing program 0: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000500)={0x0, 0x1f, 0x800, 0x8, 0x0, "4f5898cd4a1a4cd6"}) io_setup(0xe7b1, &(0x7f0000000540)) select(0x40, &(0x7f0000004040)={0x6c8d, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0x200}, &(0x7f0000004080)={0x0, 0x48f914bf, 0xffffffff7fffffff, 0x2, 0x98, 0x401, 0x20, 0x7fff}, &(0x7f00000040c0)={0x0, 0xffffffff, 0x569, 0x8000, 0x7, 0x5, 0x4}, &(0x7f0000004140)) 11:47:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f000000bf40)={0x0, 0x0, &(0x7f000000bf00)={&(0x7f0000000040)=ANY=[], 0x20}}, 0x0) 11:47:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x2c}}, 0x1000) 11:47:17 executing program 2: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f00000015c0)=[{&(0x7f0000000300)="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", 0x1fc, 0x4}], 0x40, 0x0) [ 404.020302][T21623] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:17 executing program 3: perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x952, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 11:47:17 executing program 1: recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:17 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000006440)={0x77359400}) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000010200)=""/250) [ 404.216852][T21640] loop2: detected capacity change from 1 to 0 11:47:17 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000850600802000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:17 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000280)='fuse\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee00}}) 11:47:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000001700)) 11:47:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}}, 0x0) 11:47:17 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) write$cgroup_pid(r0, 0x0, 0x0) [ 404.483370][T21657] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 404.494227][T21659] fuse: Invalid rootmode 11:47:17 executing program 1: socket(0xa, 0x0, 0x80000001) 11:47:17 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) 11:47:17 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r0, 0x0, 0x0) 11:47:17 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000075, 0x0) 11:47:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}}, 0x0) 11:47:17 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x4000, 0x0) 11:47:17 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000850600802000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @xdp, @tipc=@id, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}}) 11:47:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002140)={'erspan0\x00', 0x0}) 11:47:17 executing program 2: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r0) [ 404.890534][T21686] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) close(r0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, 0x0, 0xa}, @rc={0x1f, @fixed={[], 0x12}, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='tunl0\x00', 0xfffffffffffffffc, 0x57, 0xf74}) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}}, 0x0) 11:47:17 executing program 1: openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) 11:47:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 11:47:18 executing program 2: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0]) 11:47:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) 11:47:18 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000850600802000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f000000bf40)={0x0, 0x0, &(0x7f000000bf00)={0x0, 0x20}}, 0x0) [ 405.185244][T21708] fuse: Bad value for 'fd' [ 405.228891][T21708] fuse: Bad value for 'fd' 11:47:18 executing program 4: stat(&(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:18 executing program 0: syz_io_uring_setup(0x3079, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x232}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 405.257011][T21713] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:18 executing program 3: socket(0x2, 0x806, 0x20) 11:47:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x5460, 0x0) 11:47:18 executing program 1: select(0x0, 0x0, 0x0, &(0x7f0000000300), 0x0) 11:47:18 executing program 4: mq_open(&(0x7f0000000040)='{[].J&\x00', 0x0, 0x0, &(0x7f00000000c0)) 11:47:18 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100085060080200000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:18 executing program 0: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000400)={0xda, 0x6, 0x0}) io_setup(0xe7b1, &(0x7f0000000540)=0x0) io_destroy(r0) 11:47:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x2c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7], 0x0, 0x2}, {0x0, [0x0, 0x6, 0x4, 0x1, 0x4]}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x5, "0185"}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:47:18 executing program 3: io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 11:47:18 executing program 4: perf_event_open$cgroup(&(0x7f0000002300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8bf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) [ 405.632652][T21747] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 405.651400][T21748] x_tables: duplicate underflow at hook 2 [ 405.671567][T21748] x_tables: duplicate underflow at hook 2 11:47:18 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x2, &(0x7f0000000380)=@raw=[@map={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f00000003c0)='syzkaller\x00', 0x6f7, 0xe7, &(0x7f0000000400)=""/231, 0x0, 0x13, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, 0x0}, 0x78) 11:47:18 executing program 2: r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 11:47:18 executing program 0: syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x400040) 11:47:18 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 11:47:18 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100085060080200000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:19 executing program 1: socketpair(0x28, 0x0, 0xff, &(0x7f0000000000)) 11:47:19 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}]) 11:47:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) 11:47:19 executing program 4: syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x0, 0x400481) 11:47:19 executing program 0: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet_tcp(0x2, 0x1, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) 11:47:19 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100085060080200000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:19 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1df}]) [ 406.498221][T21792] __nla_validate_parse: 1 callbacks suppressed [ 406.498235][T21792] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 406.501357][T21793] loop3: detected capacity change from 264192 to 0 11:47:19 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x50802, 0x0) 11:47:19 executing program 1: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) 11:47:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={0x0, 0x14}}, 0x0) 11:47:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) 11:47:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) [ 406.728020][T21808] loop4: detected capacity change from 264192 to 0 11:47:19 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:19 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}, @format_type_ii_discrete={0x9}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x1, 0x32, {0x7, 0x25, 0x1, 0x80, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, '.'}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x5, 0x0, 0x4, {0x7, 0x25, 0x1, 0x0, 0xe9}}}}}}}]}}, 0x0) 11:47:19 executing program 3: socket(0x0, 0x80000, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0xe5, 0x8, 0x1, 0x3b}, {0x0, 0x9, 0x5d, 0x4}, {0x8000, 0x0, 0x0, 0x5a3d}]}) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) getsockname$l2tp(r0, 0x0, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 406.868529][T21808] loop4: detected capacity change from 264192 to 0 [ 406.901616][T21830] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:19 executing program 2: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcsa\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x2, &(0x7f0000000380)=@raw=[@map={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f00000003c0)='syzkaller\x00', 0x6f7, 0xe7, &(0x7f0000000400)=""/231, 0x41000, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:47:20 executing program 0: syz_read_part_table(0xfffffffffffffff8, 0x3, &(0x7f0000000200)=[{&(0x7f0000000100)="d5885eb2f0ee7e981081dfaa27f8636254f21a770fadec5b888edc34b61bc85c554710c59befc24d7c7def6769c395e6c41f9bfd2a9e8856bdd3f1d209c582e8f1eaceb402ef0c080a1e03a736877aea5ff3c106ca5298a8da57ec8f4eeb16d5e5f4d82914", 0x65, 0x20}, {&(0x7f0000000180)="038697ef33d02976e1c9ad235bf19cd55d3370592e91a19832f3832a2ebac10cb843d9ba28381e9e360c295522c046d114587daef4cd70f3a0401b191e130ee8dd9d6abcb1a8d52bfb2f38", 0x4b, 0x100000000}, {&(0x7f0000000a80)="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", 0x1000, 0x1}]) accept4$llc(0xffffffffffffffff, &(0x7f00000006c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000700)=0x10, 0x0) [ 407.000073][T21830] bond11: (slave bridge77): Enslaving as a backup interface with an up link 11:47:20 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1df}]) 11:47:20 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000900)) [ 407.048867][T21870] bond24 (unregistering): Released all slaves [ 407.064158][T21875] loop0: detected capacity change from 264192 to 0 11:47:20 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xc1c1, 0x0) 11:47:20 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) [ 407.211242][T21875] loop0: detected capacity change from 264192 to 0 11:47:20 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', 0x0, &(0x7f0000000080)={0x0, "b7a1bc36d1acf3a8e0dd6a47b030c5365a8c37b7e673e3e59eae1da04496b73a5cf395ca29a9b12abf3a5bb2c0f3e97fa5a601da76c0005159125dc1270bf59d"}, 0x48, 0xfffffffffffffffd) 11:47:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:47:20 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) [ 407.295813][T21924] loop4: detected capacity change from 264192 to 0 [ 407.306854][ T9780] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 407.332737][T21929] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 407.431057][T21929] bond11: (slave bridge78): Enslaving as a backup interface with a down link [ 407.445057][T21968] bond24 (unregistering): Released all slaves [ 407.676849][ T9780] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 407.685784][ T9780] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 407.713819][ T9780] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.886645][ T9780] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 407.895787][ T9780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.923595][ T9780] usb 2-1: Product: syz [ 407.956385][ T9780] usb 2-1: Manufacturer: syz [ 407.961034][ T9780] usb 2-1: SerialNumber: syz [ 408.306544][ T9780] usb 2-1: 0:2 : does not exist [ 408.337926][ T9780] usb 2-1: USB disconnect, device number 58 [ 409.016371][ T9780] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 409.406487][ T9780] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 409.415236][ T9780] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 409.426535][ T9780] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.606636][ T9780] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 409.615777][ T9780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.624880][ T9780] usb 2-1: Product: syz [ 409.629529][ T9780] usb 2-1: Manufacturer: syz [ 409.634216][ T9780] usb 2-1: SerialNumber: syz 11:47:22 executing program 1: socket(0xc, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0xe5}, {0x0, 0x0, 0x0, 0x1000}, {0x0, 0x9, 0x5d}, {0x0, 0x0, 0x0, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff, 0x3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, 0x0, 0x0) 11:47:22 executing program 0: select(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000300)={0x8}, 0x0) 11:47:22 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1df}]) 11:47:22 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) accept(r0, 0x0, 0x0) 11:47:22 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/btrfs-control\x00', 0x204100, 0x0) syz_read_part_table(0xfffffffffffffff8, 0x3, &(0x7f0000000200)=[{&(0x7f0000000100)="d5885eb2f0ee7e981081dfaa27f8636254f21a770fadec5b888edc34b61bc85c554710c59befc24d7c7def6769c395e6c41f9bfd2a9e8856bdd3f1d209c582e8f1eaceb402ef0c080a1e03a736877aea5ff3c106ca5298a8da57ec8f4eeb16d5e5f4d82914", 0x65, 0x20}, {&(0x7f0000000180)="038697ef33d02976e1c9ad235bf19cd55d3370592e91a19832f3832a2ebac10cb843d9ba28381e9e360c295522c046d114587daef4cd70f3a0401b191e130ee8dd9d6abcb1a8d52bfb2f38", 0x4b, 0x100000000}, {&(0x7f0000000a80)="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", 0x1000, 0x1}]) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000680)={0xa8, 0xb, &(0x7f0000000280)="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"}) accept4$llc(r0, &(0x7f00000006c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000700)=0x10, 0x800) [ 409.956666][ T9780] usb 2-1: 0:2 : does not exist [ 409.976407][T22054] loop3: detected capacity change from 264192 to 0 [ 409.991111][ T9780] usb 2-1: USB disconnect, device number 59 [ 409.991193][T22056] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:23 executing program 2: socket(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffa, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="9a328385f6f74f35b9bf29171a3490a67a668f2615212ff342f552a94d2995b4c56743d1c23917bef41dbf0fd02f1a53daee91d646d634f79dd82f969ced76bade41e2647944f4eb3ad8fde7cec913ffda350329ae92f32cd61557f92f102e1a6df189311926fe9cab727debc336cdcf7c766e9331a81bf5f93bda5459ef9102043c565866928f399f7c3d4dec95b762983743a7e441bfcede89ec38e16cb714336529b0eed7df50e6486a3e43a8e5bc791eb31ff01aa85c80fbae8cc26fecff0853a23d85118ab83dc196c8b2b179d5c9", 0xd1, 0x1}, {&(0x7f0000000200)="1e3cde4aa6ff6ab21dc2596202bc6f8c0fb5f7db8324dacbce3ab73372803efe9c75d2bd9cc926ec1b0c362db66e3aa185606d112b244aadb140b4d74e6a5997ac4f8fc40b3b593b57502818449f062ceb701aac1829cf35fd4bc37640044f108964dec6266f806d87bf214037694b939f8114f085023d2f2f12ae18e1f0d759b4ebd71cb737ca1fa0ac5fd96c44dd2ccd6982b33a7b1a6b496d4a5b9546abceb407b18d9b60ceba445ae9fc1bcf4451e67aadc7bae56a62b153a45966be4469c0f68a3972c040", 0xc7, 0x3}, {&(0x7f0000000300)="7797383cad5ff895b9b87e51adb237f116ac49a4bcd0e025f7e1e9eaff464dc841f9faf429c7e76ab597d3e9a7368e5c2554508eb4d4dcd836ba42007cc3db5cc4fc7a1410f727a6c0f24bab7ef15ff42b7a9bc22b3e566ae8885b", 0x5b, 0x9}], 0x22, &(0x7f0000000400)={[{@rodir='rodir'}], [{@appraise_type='appraise_type=imasig'}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@dont_appraise='dont_appraise'}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r1, &(0x7f0000000480)={0xa2740, 0x38, 0x8}, &(0x7f00000004c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000002bc0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002a80)={0x14}, 0x14}}, 0x40000) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) 11:47:23 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r0) [ 410.062584][T22058] loop4: detected capacity change from 264192 to 0 11:47:23 executing program 1: clock_gettime(0x2, &(0x7f0000001680)) 11:47:23 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xc1c1, 0x0) semget(0x2, 0x2, 0x3d) semget$private(0x0, 0x3, 0x200) semget$private(0x0, 0x1, 0x43) semget$private(0x0, 0x0, 0x8) semctl$IPC_RMID(0x0, 0x0, 0x0) 11:47:23 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xb, 0xffffffffffffffff, 0x0) [ 410.204399][T22106] loop2: detected capacity change from 264192 to 0 [ 410.219817][T22077] bond11: (slave bridge79): Enslaving as a backup interface with a down link [ 410.243644][T22092] bond24 (unregistering): Released all slaves 11:47:23 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1df}]) 11:47:23 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) [ 410.391492][T22170] loop2: detected capacity change from 264192 to 0 11:47:23 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 11:47:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x40) 11:47:23 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_read_part_table(0xfffffffffffffff8, 0x3, &(0x7f0000000200)=[{&(0x7f0000000100)="d5885eb2f0ee7e981081dfaa27f8636254f21a770fadec5b888edc34b61bc85c554710c59befc24d7c7def6769c395e6c41f9bfd2a9e8856bdd3f1d209c582e8f1eaceb402ef0c080a1e03a736877aea5ff3c106ca5298a8da57ec8f4eeb16d5e5f4d82914", 0x65, 0x20}, {&(0x7f0000000180)="038697ef33d02976e1c9ad235bf19cd55d3370592e91a19832f3832a2ebac10cb843d9ba28381e9e360c295522c046d114587daef4cd70f3a0401b191e130ee8dd9d6abcb1a8d52bfb2f38", 0x4b, 0x100000000}, {&(0x7f0000000a80)="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", 0x1000, 0x1}]) accept4$llc(r0, &(0x7f00000006c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000700)=0x10, 0x800) 11:47:23 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) [ 410.529093][T22182] loop4: detected capacity change from 264192 to 0 [ 410.570540][T22186] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', 0x0, 0x56cc, 0x6, &(0x7f00000015c0)=[{&(0x7f00000002c0)="2c0c04b9fcb38ba9a24e4433666af314226997fa1e138f81d4d42dfd36f1cf42e925c1f9dda3996d35ec858404611c17474eced43d59dde4", 0x38, 0x7}, {&(0x7f0000000300)="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", 0xff0, 0x4}, {&(0x7f0000001300)="dcf739c66b8b020e510d5843d90cc229c35e4ab5f518cca52832abfa261168083d9647b2eee8fdfbebb8e0c37b53e9c6f1f326cc7919f76ae8d172787334e2f7fec3697f328ab51c1ee6a4fa4a7394df07523a", 0x53}, {&(0x7f00000013c0)="da5f3c644f6608a20151b6caebf707251d3e6d253b5ad78b3ac9327d93f27258b24fe867aa26d684cd7e6da823e5b4d9ba84e273ad67822c85f5458d2f56ebc66068845f8e9441d22b0d3ac69d773769c28da315b8305e9474742d61c734d4bf5afda6b4d8a8651946ac9221a7cd142abd43da0decd5ec14696550e4fc4c6cd34b6ca014e8d02a4c5994e42c31c804e21ba9e8b082e0a0bc", 0x98, 0xffffffffffffff01}, {&(0x7f00000014c0)="063be2585ee1245fbbc3", 0xa, 0x3ff}, {&(0x7f0000001500)="105bce2cec6a3198992d2935561c2dcc21cb7cf8e23ff4c63b204b2bff33f81acbf0184063b85969a16fe5417f710346f4b08e890670f0c39ef620e46c4e676667a601a579f9f7c4c57713b1b10445c314784e832ae831fe8dd6ce0dc2d18dbf29ef26ef21995e61847d16f90d66e348d7a53283c6d8f8b56547f9770677a0ebdc87b464498e478314f8f25d16cdd0545f8019cf85ac88a55cd71497f9b35070679a812f43af47ed811b084f84", 0xad, 0x100}], 0x40, 0x0) 11:47:23 executing program 1: clock_gettime(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,u3er_id=']) [ 410.627225][T22189] loop3: detected capacity change from 264192 to 0 11:47:23 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) [ 410.697427][T22186] bond11: (slave bridge80): Enslaving as a backup interface with a down link [ 410.724998][T22207] bond24 (unregistering): Released all slaves 11:47:23 executing program 4: syz_read_part_table(0x0, 0x0, 0x0) 11:47:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @loopback}}}}) [ 410.837035][T22244] loop0: detected capacity change from 16383 to 0 [ 410.902264][T22261] fuse: Unknown parameter 'u3er_id' 11:47:23 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:47:23 executing program 2: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x200, 0x0) 11:47:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) 11:47:23 executing program 3: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x84202, 0x0) [ 411.048880][T22244] loop0: detected capacity change from 16383 to 0 11:47:24 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) [ 411.120349][T22296] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:24 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vcs\x00', 0x200000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 11:47:24 executing program 1: socketpair(0x15, 0x0, 0x0, &(0x7f0000000280)) 11:47:24 executing program 0: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000500)={0x0, 0x1f, 0x800, 0x8, 0x19, "4f5898cd4a1a4cd6"}) io_setup(0xe7b1, &(0x7f0000000540)) select(0x40, &(0x7f0000004040)={0x6c8d, 0x2, 0xe8bb, 0x81, 0x1, 0x0, 0x4}, 0x0, &(0x7f00000040c0)={0x1, 0xffffffff, 0x569, 0x8000, 0x7, 0x5}, &(0x7f0000004140)) 11:47:24 executing program 4: syz_read_part_table(0x0, 0x0, 0x0) [ 411.242717][T22296] bond11: (slave bridge81): Enslaving as a backup interface with a down link 11:47:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x2c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x7, 0x4, 0x0, 0x7, 0x6, 0x2], 0x5, 0x2}, {0x3, [0x1, 0x6, 0x4, 0x1, 0x4, 0x2], 0x6, 0x5}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x5, "0185", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x189800, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f00000005c0)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcsa\x00', 0x243000, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="28008363cfcf591d77fbe8f4c4c2840000", @ANYRES16=0x0, @ANYBLOB="000127bd00000000df25010000001400078808000100", @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8851) accept4(r0, 0x0, 0x0, 0x800) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ocfs2_control\x00', 0xc120, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000540)={0x1, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f0000000580)={0x4b7, r5}) 11:47:24 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) [ 411.320143][T22332] bond24 (unregistering): Released all slaves [ 411.403848][T22363] x_tables: duplicate underflow at hook 2 11:47:24 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,u3er_id=']) 11:47:24 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) [ 411.538880][T22363] x_tables: duplicate underflow at hook 2 11:47:24 executing program 4: syz_read_part_table(0x0, 0x0, 0x0) 11:47:24 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000500)={0x0, 0x0, 0x800, 0x0, 0x19, "4f5898cd4a1a4cd6"}) io_setup(0xe7b1, &(0x7f0000000540)=0x0) io_destroy(r0) 11:47:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000480)) [ 411.633280][T22407] fuse: Unknown parameter 'u3er_id' [ 411.647807][T22410] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 411.672012][T22412] fuse: Unknown parameter 'u3er_id' 11:47:24 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/btrfs-control\x00', 0x204100, 0x0) syz_read_part_table(0xfffffffffffffff8, 0x3, &(0x7f0000000200)=[{&(0x7f0000000100)="d5885eb2f0ee7e981081dfaa27f8636254f21a770fadec5b888edc34b61bc85c554710c59befc24d7c7def6769c395e6c41f9bfd2a9e8856bdd3f1d209c582e8f1eaceb402ef0c080a1e03a736877aea5ff3c106ca5298a8da57ec8f4eeb16d5e5f4d82914", 0x65, 0x20}, {&(0x7f0000000180)="038697ef33d02976e1c9ad235bf19cd55d3370592e91a19832f3832a2ebac10cb843d9ba28381e9e360c295522c046d114587daef4cd70f3a0401b191e130ee8dd9d6abcb1a8d52bfb2f38", 0x4b, 0x100000000}, {&(0x7f0000000a80)="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", 0x1000, 0x1}]) accept4$llc(r0, &(0x7f00000006c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000700)=0x10, 0x800) 11:47:24 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x0, 0x0) accept4$llc(r0, 0x0, 0x0, 0xc0800) 11:47:24 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') [ 411.810358][T22420] bond11: (slave bridge82): Enslaving as a backup interface with a down link [ 411.835631][T22452] bond24 (unregistering): Released all slaves 11:47:24 executing program 3: select(0x40, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)={0x8}, &(0x7f0000000340)={0x77359400}) [ 411.888057][T22461] loop0: detected capacity change from 264192 to 0 11:47:24 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}]) 11:47:24 executing program 3: socket(0x0, 0x80000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xe5}]}) 11:47:25 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x472482) 11:47:25 executing program 2: mq_notify(0xffffffffffffffff, &(0x7f0000000100)) [ 412.092184][T22507] loop4: detected capacity change from 264192 to 0 11:47:25 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:47:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 11:47:25 executing program 1: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) 11:47:25 executing program 2: perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 412.318199][T22524] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:25 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}]) 11:47:25 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x450400, 0x0) 11:47:25 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x143f132bdb8efb30, 0xffffffffffffffff, 0x8000000) [ 412.472581][T22530] bond11: (slave bridge83): Enslaving as a backup interface with a down link 11:47:25 executing program 2: add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000180)={0x0, "661c4735e68b499cd1313c457a2e93868ca9dd9007dd3e2cd9e49b3814af660388e2921c339498fe33e6c9f28c01592f8c78b330f8bdece38eca63b42fb01da1"}, 0x48, 0xffffffffffffffff) 11:47:25 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_read_part_table(0xfffffffffffffff8, 0x3, &(0x7f0000000200)=[{&(0x7f0000000100)="d5885eb2f0ee7e981081dfaa27f8636254f21a770fadec5b888edc34b61bc85c554710c59befc24d7c7def6769c395e6c41f9bfd2a9e8856bdd3f1d209c582e8f1eaceb402ef0c080a1e03a736877aea5ff3c106ca5298a8da57ec8f4eeb16d5e5f4d82914", 0x65}, {&(0x7f0000000180), 0x0, 0x100000000}, {&(0x7f0000000a80)="92943f5c016d3c3b71553fcee21b213fc38b4dc05b80cda6f39800da7802f8f3b37eb175c5c209718cc20664dfbf39074e4cccd6df5d1bd6f01fe4e7af7339c27c83d1dee29af041cb8ad767ae3e9025e4e14923cafa922195e1b849e7e150f7494373afbc132801776659fdc8a20e364ac66500abc9d8be2428eeb9469ce539cae715ffb4a975a19ebdb2ba312808a073e67d5fda0bcc9fe6e26f474bc8bbb303fb4124d9e87f44f7523ab709d184d60e07eaf60dd67297400b864de8eb1db95db27f25a499827d340beadada64bcb86125dd0309fca55eaf83bfe7ae96131ef2d2051be37a054760bb454665535d8758f1b87ea14f5ca9c5ebb85bea1aecaa9afd176d0bd548db11e9fe41179f40d1b08bd39ce28c23f0b455abc5766f98429d3f25f12a2e9230e058549638144abb8fd0d03dc36094fee154406befaf7dcee546c0da522c2c5ea1b710a54594921313ff961e0e1cb84d1e243fb006a3cb66b306021e4454f1a4f59de000acac6c8efdf4a27b65316c7bc350db9ef64e585c3c62fddf22ea3cad7fad12c89ff1c7602f4928d6eaec06182a7bbf522006b1675364d5fbf7ea8dac490ddad2aaa0bbd62b13a92e7f61765b78ad6d03145f18949baaf7ac438a5362fea9ce1c34ad0ab8b68851087b626d74503dd06dc2cb4f8b6c6315ea0b141aa806e50a39d20e89d524bd259dc4bdd1f1d7afa65c1b4b4836b06d6a4af486dd7d18b137bbe2820a1f7bc473f836b8f8a3ccaebe5c7487f96e625223059065b651aa756164094f29c17abbdd5bfd5483b4f0262968eeb6c33f8900c4707ede7ab211ef3d1d095a6c2e77ba72bc0a8a172430310a13b612fb24a7525c988b4b582aa25ef322cc27e28ef100c75e9f12fae43cf6785903a59f1f0caf69683d6fa3f93dc9b5ba5d2f56a6a90839dc3c3ec12ccc6394c23bd8b344e301280a71db2ed2a201e36d90b02c96489d87a0f6890b238d0157c1b4fb9704199fc26542a863edc1d2aa35a52295625b01aba2761b49778bed6315b819e6d49fcc8705b2f1040b3102f80295cb6cc272eac3eff6d8b3008b762d56028dc28cd066e1fe864402c9431267b02d9f21573e9a637820661d1e889fff20a7ff3c67d2fbea1892b9362dafb68899c0313f5a9340552d0235c466d5695d10fa1d6d1c9480d6c0d6029be46f366d8fbb4c3d1b31417f65c0da88409ec94b2837f505062b8e277e915265290e2e7321b3f6e4abb07aef3e24ae3b0d7f4e236991656a7fcd16f2f28c3142db3c908cb16d4e612ff0dced2cc8d26d844e7d35a56adafe3bed69e28b08699c62e4dd09da56cdebc7447a1f362729284cf6e2b2e9115b16df9c4abcccf4e72e01c16d02046d208995f8bc1b2897ae24263e9d70a184fd7fd1c558e0cd8db2c8c8259db502068079151ec7a372f2b9092e87f15418094732bf2647e6bada8484fd0e6649d7f6bd64eda079946160fc9f7b77b1157b0f4634bc013547a70373c91cc857bb33cdb1b7f3f02303667bff2d866b7f244b6410bcacbea82a61411cdeca4be0a32f1f83f292d9b91e9b7ea7f47294169289da0482ee899b8b73ec9d58a1f1d5852daa411580ca9f865e378af632d8cc8be8a8ac6447fdd4807fa4db00e583e1b22db9bb26e53aab72f04610e5320266f87a67308dea2fb44d6b0b42847f748b9b3e00d60875f66025ec16208ecd94eef0bfec52f29319a112aa827f54cbabea047e11f4ea08e064a95bdeefcc6af73ac606a90d409544612459973aa761f0f358ced1daa428d9fe351d0b4edf952cba5ff1dab9c55d1646d2144d208bac306b5fe5c935dd7b5daee7dc44e5a712ff6528fdd28ec27d8c62dfd60ac4ea604d22e7bb9ea5a990beacd8bdc34ceb54092b6c744cb48657bf7829b6577f0b5f896381ba17d0d22f9781982139f41d6a417836a5bde110c3f9bab7a4df80713884fbc7c028fb5bc089ec14acda09bce140f0f52c2ce7a9e87bb4b719176db7a5e961654c19e807f887530182b56941d54ee1f1ad4a27d7ba65116c48f3e1f455686ff5b4c6a54cbe2bae1a0d4694832249bfb4d23405dc34041edeb73f7c4a9cfc080fa3b5d0fda30d09df3759bd8dd419cf5496e37b73b71ed256358c20cb08fb84eb34540b3d3072318eed2b05bff5df2598c2a8cf169191bc8a3d86a8b1c3723594b6bfc68009d7367df93e756c828ee2557041e0157ac6197adcc472e769800169961e5b23ba3aa78a77852eea28fdbdc36cb81d776fe89e7a666f8c1511f2bf2d73f5c6caa41f62ea1b6f61ad9250de7c8b014990f9767d3c72a5bdf22bd08a502d6321cfb03d8d1b18a07ffbe8e99a77d6065db85df6d0931820a3258539fc24c3dee4da9a0c7f1a321845f322250dacca5cd695c6a1b2b4429f93348db6f21010313cbab07483adeaf0e754896bfbf8cfb94993d65ab72106ab9f3575f8ceec5f144a85a7d38b7c154235ae226987f0b7501a18fb778e8884125aa310b5ccfc0e510a60ae6390c39c457253ce6ff3fe5265e2f56ce4bf9d9a30af8533817a639898b1450cf1b7a9a05e157646b262f48108b25a9aaaeae1ff799240186c936166642ce8f6de6f7458cc91dddfa3470713a45ef1671c5e0022b22d90da1c568c94465d45516e1ebb86b44f2141cb52b1082cba23e1ebf176373bfa0edefeafc346c0dec5eda75e5a81584cd0f191f88722bc269f5c131d6426dc8be0490ad155157cb0ed760acf8e57640bf82fb0a5717077653c9a12353572b124a47d86a7c7c49a2f052c4839d3ee37bdfe7506ed98cef24100b36b2b278d6b611fd98532bb21cb140a1cc26f63fb0f68807565edfb1946be32005c8aa49383f9da9883cfd40aa057129f4f78113dee5330f2f1a77a463529c5c6c0cfd9b67e3ac7bc3d65a8c5f8b2a0201afecde32eb3d2cef2354c989d75e5492ad06fe91ca8b1724ec206aa52065568a48a213bbd06665ae7c02945e2d8e407c835a40179989ad8638e7b5c1ee18e6399ab4b2b2871236f00b41834645defd70df85c422f66129476600970cfadc4fb1768ebb5ada87d9dc0531f0526d6598c06213b1ff43fb650f3fa8fa57edfe0da049e94e954c7b3dd07ce3d0e32f31fd6158535fee37a1debefde196636420a5bfdfc50a5d45fb6f45b0332c80d2a287caa84ab78ab2ae9ceff561afbf0c2f23d418744c80c67490973fc09c27f837200ed5687849f35edb97289b0dafd21583e8077bdbdd8771c00a5309930e0351eb35203bbb1d122e0e6e402b7ab83f0d939496eb9c99dd2c333b73635610f8b88fbd73c0479836328ca9dde9461e2231db9d4a7e6b11ecbca1afa3e7a56c46a02ccf62c0f339560171c27e3ce7b4f438747988bd1ea74cc6609cc62e1e13e134d732336457bdbaea4a4e9644db1e6a96ae18fb799ba58a5acc5f76be1122229486fe5f8686447eec0e93021b984310fcc37fc7b7a08b0d11f5a97fb0e33046f47fd3805c14616e4a2cf349362846b78448df4d10bea4d04bbe83ea0e646205923f54c74348b9fe23db5a31e49f2a7d318d0db040504c57c1b7ac78779d722901f065aa6ad2153ecb054dac81186726dfa7dcf7badec9098659e5fe3fa283f3abb6a74b5ea6fe17df4a2a76df43460e66166ed25f2f36ecf97e6d37cd0aaec83a4446571fc252abdab48657258007619a84b6a3b3814e104d98eb899f8da1f15247a44793a69abf9634ee9ce481aaed60a5144086afd87c55209c3a12a04a415094816714250243c88a36e7427d993df346872f01a732fae7c97da36fceb27ccf395b1ffa0b5620917fb87fd1634197891ecfa0633256bae48a8aa5a669b5c1517956da17df3a04aaa82e813582d1493d3e0a88431eab83953a2844cc8c6e15a50528651133a50609832484711b6f3e5553b5e3829e1331c7ffe08c32470c800601ef11724f9437ccc0f75562df7b6036a23a4ef8f01e807cab82217d7447992440f0204799166ad84547c7849306a4995b866c45abecf98714fa5d936025f88630bea999e9d1d579e973dee78c06ddfc1e5cca939088c74c61f446f34d884e91996a2f2bfd84acebd4b186973f5fc7754a4f2013613e1c7f9097e83fe294fcc8a5c5500b93b2067ac370b7b4cadf47e4e52b6cf3bdf22e86f40daa4d536651bda0ca5776a9dd7577919766e97df0e4485c83c98b0bf812d2412390154da9f1b448819093ac98582ca6f8b79d5b6dfe45cb0203e8bf2bf065476e4caf496406107f617ee000d985dde3d06d1fdae704b3bdf0a1f0b6ce0fd25909e2a5a33df3c543a34c69c70d0f406af20c147558094385c9a6c1fd5cb62d6630a83893167fd00a3286635a6e68ad7fe4b859c42bcbe2039e00eeec7952195c2f463be6a8a8e3fe22c9a50faa10d4d146eefcbded677593e10f09d641939d1651eb6c59a508ce51b8b79ca8df53dc8a1e756f5a7457e66e91150de4f70af6d1d2e1291b230b7e1c85adc711890d569a07673b75f10b132778247f3270bb74e80b3dc26393199c3b4c3b3f5659cce31d5b233a44b4f0e674547dd8c4ba1b1e531b26e49b7f533bfc94176015bb9e47c0de0821b02b1a96d89908307c18fd88c8e11b67d7acbe82c7221638fb02e48aac3ea0ca4877575ca79e732622fbb14f4b87302bd247a64e1eddeabd56e75f8f8ac8db45e73ac71294f4167ec071f189cb10a875da36a9729a5fd175fbf2075e5bf7662b19dc53adea9275a50eee03a2c5b4b134b7d9d0c11a68af4493f272e54de0a0519b250dfc99d1a557c8417200b55d7925f94de36964a5535eae1e0e64847bc4bae7c9dbbaf8a0a1b7bb394c0f5eab8bf9a6f3a898d69ed8be144fcf403e9967843fcfcc570488db49b40b002240f7aac7617e773bd1d1021e5117ea94e8b6e2c9d9319f27e8f5dfdbb81d963ed7545e70b283569a4093707b6d61a5ffcfd9a2664452e49d7b1cb788ae222b3edfb91dfac6ace3b06c38949be27293c0f98095d6472f81a3ae3425d42b2989e888567c0420aa350816ff051cf3986342e6b270be2cb69002c1d858f6a569c990a32ade18efd8ff0f942587c31718aea88282ae03d3c87c7474ae489091fc674ebc9896bf9f2ffcc31f6972867e94cbf77332d49c2bcc9d9ec1cc69560293c4cbef2086439f9efa41afd64b6c64c781ed02b171ee7df29179330b6740ab544b64953cb457d16799e5ed8f140c2613e6bbe40705401562e5ac26d77dc52776692b7f84d55e2cd8a3ba89ce3ddaf3c4dfe1793ff458a4c8e40b1ce0dad85ff4a500f6c4234c6ee1ffe0e0a08288ab1bfa204d5cc3a8f50a69b52b65916572685877d2b0f2cd894fd1012318e3d901bb88c53646e483ebc1c00b2880b7d70cadf78bcc2742f96950bbbcefe9637c2df80c9743bb80b0c92180b96c94d7c9c71ea6c65e1d971c2d7fe28ca6e9487ea233b18a7eab4c9e33fa7fc7a8ac5603ec049167899dea85a0925b33969ad733938677038d6d52ef36f67c9451828f95822fe4178eb36ea6d3d20aac7cbc79c04d52135f84ca767d7e56b18f45b6550bee66515cfdab275c2527753bd914816342a2b2975c0b67ce3425158478632422fa39c6bc70a54bcd29f6340014c61c01c7aa5bb70c1fe670832ad53d8c2f26062c65d5953ef255fda6982248b0703f88e65e59397cbb8f0b064a9cf89192684dc1f71b48dbd9466aac9d9330440413a5b541b897114a35229d4596d589fe62a7d411ddd9ccd11e45f262fd91dc2a9f18eef732d042bef12c2af888a4b2cfb52b99c426e3fb923c33441fbbc14ce", 0x1000}]) accept4$llc(r0, &(0x7f00000006c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000700)=0x10, 0x800) [ 412.577536][T22524] bond24 (unregistering): Released all slaves [ 412.593512][T22572] loop4: detected capacity change from 264192 to 0 11:47:25 executing program 0: add_key(&(0x7f0000000480)='cifs.idmap\x00', 0x0, &(0x7f0000000500)="1e", 0x1, 0xffffffffffffffff) 11:47:25 executing program 2: select(0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)={0x77359400}) 11:47:25 executing program 3: syz_mount_image$nfs(&(0x7f0000000300)='nfs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[], [{@subj_user={'subj_user', 0x3d, 'user_linkup\x00'}}]}) [ 412.742575][T22611] loop1: detected capacity change from 264192 to 0 11:47:25 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:47:25 executing program 0: syz_mount_image$nfs(&(0x7f0000000300)='nfs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)) 11:47:25 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}]) [ 412.897913][T22627] nfs: Unknown parameter 'subj_user' [ 412.908212][T22627] nfs: Unknown parameter 'subj_user' [ 412.917873][T22628] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:25 executing program 1: request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0xfffffffffffffff9) 11:47:26 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x4}) [ 413.077208][T22635] bond11: (slave bridge84): Enslaving as a backup interface with a down link [ 413.133070][T22671] loop4: detected capacity change from 264192 to 0 [ 413.154120][T22663] bond24 (unregistering): Released all slaves 11:47:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x3d0, 0x118, 0x118, 0xffffffff, 0x118, 0x398, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'macvtap0\x00', 'vlan0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @port, @gre_key}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @broadcast, @rand_addr, @port, @icmp_id}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 11:47:26 executing program 0: add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 11:47:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x0, "5db1f0a842cb8ae8"}) 11:47:26 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {0x0}]) 11:47:26 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) [ 413.501236][T22721] loop4: detected capacity change from 264192 to 0 11:47:26 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:47:26 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:47:26 executing program 0: syz_usb_connect$uac1(0x0, 0x8c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x0, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x0, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x1, 0x0, {0x7, 0x25, 0x1, 0x80, 0x0, 0x41}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x20, 0x4, {0x7}}}}}}}]}}, 0x0) 11:47:26 executing program 3: socket(0x3, 0x0, 0xffffffff) 11:47:26 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {0x0}]) 11:47:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) 11:47:26 executing program 3: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000400)={0x0, 0x0, 0x0}) io_setup(0xe7b1, &(0x7f0000000540)=0x0) io_destroy(r0) [ 413.827087][T22736] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 413.836186][T22737] loop4: detected capacity change from 264192 to 0 11:47:26 executing program 2: perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:47:26 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {0x0}]) [ 413.963332][T22756] bond11: (slave bridge85): Enslaving as a backup interface with a down link 11:47:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffff1a5b, 0x2, &(0x7f00000001c0)=[{0x0, 0x0, 0x1}, {&(0x7f0000000100)="e5", 0x1, 0x4}], 0x8400, &(0x7f0000000200)={[{@utf8no='utf8=0'}], [{@subj_user={'subj_user', 0x3d, '{:\'/*\x96\xa1:\xdc*-\\^'}}, {@uid_gt={'uid>', 0xee01}}]}) socket(0x2a, 0x0, 0x0) [ 414.035884][T22736] bond24 (unregistering): Released all slaves 11:47:27 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40080, 0x0) [ 414.126177][ T9780] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 414.135266][T22810] loop4: detected capacity change from 264192 to 0 [ 414.192834][T22825] loop2: detected capacity change from 264192 to 0 11:47:27 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:27 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 11:47:27 executing program 3: request_key(&(0x7f0000000740)='big_key\x00', &(0x7f0000000780)={'syz', 0x0}, 0x0, 0xfffffffffffffffa) [ 414.342104][T22825] loop2: detected capacity change from 264192 to 0 [ 414.474902][T22840] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 414.506526][ T9780] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 414.526392][ T9780] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 414.535747][ T9780] usb 1-1: config 1 has no interface number 1 [ 414.544752][ T9780] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 414.627969][ T9780] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 414.635228][T22846] bond11: (slave bridge86): Enslaving as a backup interface with a down link [ 414.676119][ T9780] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 414.703749][T22875] bond24 (unregistering): Released all slaves [ 414.873872][ T9780] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.885406][ T9780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.904473][ T9780] usb 1-1: Product: syz [ 414.911290][ T9780] usb 1-1: Manufacturer: syz [ 414.917893][ T9780] usb 1-1: SerialNumber: syz [ 415.278187][ T9780] usb 1-1: USB disconnect, device number 58 [ 415.925996][ T7] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 416.286322][ T7] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 416.295197][ T7] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 416.304253][ T7] usb 1-1: config 1 has no interface number 1 [ 416.310994][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 416.325349][ T7] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 416.336585][ T7] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 416.506087][ T7] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 416.515336][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.525493][ T7] usb 1-1: Product: syz [ 416.531083][ T7] usb 1-1: Manufacturer: syz [ 416.536014][ T7] usb 1-1: SerialNumber: syz 11:47:29 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000240)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000500)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fe3abb1a"}, 0x0, 0x0, @planes=0x0}) 11:47:29 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)}]) 11:47:29 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) bpf$ITER_CREATE(0x21, 0x0, 0x0) 11:47:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x2040025, &(0x7f00000008c0)) 11:47:29 executing program 3: openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x0) 11:47:29 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) [ 416.810070][T22954] loop4: detected capacity change from 264192 to 0 [ 416.825431][T22957] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 416.856448][ T7] usb 1-1: USB disconnect, device number 59 11:47:29 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) syz_mount_image$nfs(&(0x7f0000000300)='nfs\x00', &(0x7f0000000340)='./file0\x00', 0x40, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="bf2a92e665d049882ff0417da09441d80a337c338c4bfbdc887777c44dcd705ad768f213fe27d94bab047d88c4209e36b30462896923475ec2d085a7e0715740160b63b7076d8036b13bb94fe0e73ae47f2f23cc37e6812052128d5a5e7cc395649e5b690dfacde9dfd98f96b403ebc27b1d4fadf1503efe013c0850", 0x7c, 0x1000}], 0x800000, &(0x7f00000004c0)={[{'gretap0\x00'}], [{@subj_user={'subj_user', 0x3d, 'user_linkup\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'gre0\x00'}}]}) 11:47:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 11:47:29 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0) 11:47:30 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)}]) [ 417.023497][T23014] loop2: detected capacity change from 16 to 0 [ 417.043233][T23014] nfs: Unknown parameter 'gretap0' [ 417.063785][T22968] bond11: (slave bridge87): Enslaving as a backup interface with a down link 11:47:30 executing program 2: sendmmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 417.148795][T22981] bond24 (unregistering): Released all slaves [ 417.162702][T23030] loop4: detected capacity change from 264192 to 0 11:47:30 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) 11:47:30 executing program 2: clock_getres(0x0, &(0x7f0000000240)) 11:47:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 11:47:30 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) timerfd_gettime(r0, 0x0) 11:47:30 executing program 3: socket(0x22, 0x3, 0x0) 11:47:30 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)}]) 11:47:30 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:30 executing program 2: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f00000015c0)=[{&(0x7f00000002c0)="2c0c04b9fcb38ba9", 0x8}], 0x0, 0x0) 11:47:30 executing program 1: syz_io_uring_setup(0x6204, &(0x7f0000000000), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), 0x0) 11:47:30 executing program 0: r0 = epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = getpid() r3 = getpid() r4 = socket$netlink(0x10, 0x3, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000040)={r0, r1}) [ 417.573958][T23089] loop4: detected capacity change from 264192 to 0 [ 417.583791][T23093] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x189800, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcsa\x00', 0x243000, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="28008363cfcf591d77fbe8f4c4c2840000", @ANYRES16=0x0, @ANYBLOB="000127bd00000000df2501000000140007880800", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8851) accept4(r0, 0x0, 0x0, 0x800) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ocfs2_control\x00', 0xc120, 0x0) 11:47:30 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_WRITE(r0, 0x0, 0x0) 11:47:30 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="92943f5c016d3c3b71553fcee21b213fc38b4dc05b80cda6f39800da7802f8f3b37eb175c5c209718cc20664dfbf39074e4cccd6df5d1bd6f01fe4e7af7339c27c83d1dee29af041cb8ad767ae3e9025e4e14923cafa922195e1b849e7e150f7494373afbc132801776659fdc8a20e364ac66500abc9d8be2428eeb9469ce539cae715ffb4a975a19ebdb2ba312808a073e67d5fda0bcc9fe6e26f474bc8bbb303fb4124d9e87f44f7523ab709d184d60e07eaf60dd67297400b864de8eb1db95db27f25a499827d340beadada64bcb86125dd0309fca55eaf83bfe7ae96131ef2d2051be37a054760bb454665535d87", 0xf0}]) 11:47:30 executing program 1: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) io_setup(0xe7b1, &(0x7f0000000540)) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001580)={0x0}) io_setup(0x8, &(0x7f0000001700)) 11:47:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) [ 417.724071][T23111] bond11: (slave bridge88): Enslaving as a backup interface with a down link [ 417.759365][T23093] bond24 (unregistering): Released all slaves 11:47:30 executing program 2: syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x0) 11:47:30 executing program 0: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:47:30 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) [ 417.909497][T23196] loop4: detected capacity change from 264192 to 0 11:47:30 executing program 2: syz_io_uring_setup(0x6204, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 11:47:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0xffff8001, 0xf5, 0x0, "0b42f0b6c2efab0e91f6fe5050bc0a1139ec1f"}) 11:47:31 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="92943f5c016d3c3b71553fcee21b213fc38b4dc05b80cda6f39800da7802f8f3b37eb175c5c209718cc20664dfbf39074e4cccd6df5d1bd6f01fe4e7af7339c27c83d1dee29af041cb8ad767ae3e9025e4e14923cafa922195e1b849e7e150f7494373afbc132801776659fdc8a20e364ac66500abc9d8be2428eeb9469ce539cae715ffb4a975a19ebdb2ba312808a073e67d5fda0bcc9fe6e26f474bc8bbb303fb4124d9e87f44f7523ab709d184d60e07eaf60dd67297400b864de8eb1db95db27f25a499827d340beadada64bcb86125dd0309fca55eaf83bfe7ae96131ef2d2051be37a054760bb454665535d87", 0xf0}]) 11:47:31 executing program 1: io_setup(0x8, &(0x7f0000001700)) 11:47:31 executing program 0: syz_read_part_table(0xfffffffffffffff8, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x20}, {&(0x7f0000000180)="03", 0x1, 0x100000000}, {&(0x7f0000000a80)="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", 0xc78, 0x1}]) [ 418.100493][T23214] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:31 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 11:47:31 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) [ 418.185524][T23227] bond24 (unregistering): Released all slaves [ 418.207037][T23230] loop4: detected capacity change from 264192 to 0 11:47:31 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:47:31 executing program 3: syz_read_part_table(0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000000)="b58d039f42b62c80093cb4e54536e92adec229cb79ab47bbe5489d46cf5bc3aab6c88b50dc4b785e3bc5c0be150e4e00508fde5ea7260c5623ec87f348b39fb339b5d9943d2e3c8a4b437b24761f176c35b34fc02bda9610df9e2f9bd0756ed94c397790c10cdfa98b24b3def8cad5e832682baf8db46fcaa98d160f8c745109420f4ddef9e1d16ab62b2934d263a35f94f102340e6c81b8138d5afe59b5e80ab7f60519f153d47a07986beb369e681da91818ec214d962124d048b6d01b8f6666c00e254ea026f440da2e5bd78710da505147f1710d35770e1970a0f91a4e340e09cde9aa76268333f1c780164c95c527caffcf126da17a532b8c9499ce98", 0xff, 0x3}, {&(0x7f0000000100)="a07a24f07170817d850ed02772e80e794ab8fecf2718c4671b27587e6033081168", 0x21, 0x58e}, {&(0x7f0000000a80)="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", 0x156, 0x96}]) [ 418.312928][T23298] loop0: detected capacity change from 264192 to 0 11:47:31 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="92943f5c016d3c3b71553fcee21b213fc38b4dc05b80cda6f39800da7802f8f3b37eb175c5c209718cc20664dfbf39074e4cccd6df5d1bd6f01fe4e7af7339c27c83d1dee29af041cb8ad767ae3e9025e4e14923cafa922195e1b849e7e150f7494373afbc132801776659fdc8a20e364ac66500abc9d8be2428eeb9469ce539cae715ffb4a975a19ebdb2ba312808a073e67d5fda0bcc9fe6e26f474bc8bbb303fb4124d9e87f44f7523ab709d184d60e07eaf60dd67297400b864de8eb1db95db27f25a499827d340beadada64bcb86125dd0309fca55eaf83bfe7ae96131ef2d2051be37a054760bb454665535d87", 0xf0}]) [ 418.400001][T23311] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:31 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) [ 418.444290][T23311] bond24 (unregistering): Released all slaves [ 418.469675][T23310] loop3: detected capacity change from 5 to 0 11:47:31 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000003e40)='net/rt_cache\x00') sendmmsg$nfc_llcp(r0, 0x0, 0x0, 0x0) 11:47:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002400)=ANY=[], 0x14}}, 0x0) [ 418.577653][T23381] loop4: detected capacity change from 264192 to 0 [ 418.597136][ T4891] Dev loop3: unable to read RDB block 5 11:47:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x189800, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcsa\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="28008363cfcf591d77fbe8f4c4c2840000", @ANYRES16=0x0, @ANYBLOB="000127bd00000000df2501000000140007880800", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8851) accept4(r0, 0x0, 0x0, 0x800) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ocfs2_control\x00', 0xc120, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000540)={0x1}) 11:47:31 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000000340)=[{0x0, 0x0, 0x58e}, {&(0x7f0000000a80)="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", 0x156, 0x96}]) [ 418.623042][ T4891] loop3: unable to read partition table [ 418.662512][ T4891] loop3: partition table beyond EOD, truncated 11:47:31 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001640)={0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) [ 418.679323][T23391] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 418.687994][T23310] Dev loop3: unable to read RDB block 5 [ 418.693590][T23310] loop3: unable to read partition table [ 418.711400][T23310] loop3: partition table beyond EOD, truncated [ 418.720793][T23310] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 11:47:31 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x168}]) 11:47:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@rodir='rodir'}], [{@func={'func', 0x3d, 'FILE_MMAP'}}]}) [ 418.777554][T23396] bond24 (unregistering): Released all slaves [ 418.809796][T23398] loop1: detected capacity change from 5 to 0 11:47:31 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) [ 418.939650][T23398] Dev loop1: unable to read RDB block 5 [ 418.953829][T23398] loop1: unable to read partition table 11:47:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x81000) [ 418.980851][T23479] loop4: detected capacity change from 264192 to 0 11:47:32 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 11:47:32 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000300)="bd38832aa0d96fba3d73fad7cd21", 0xe) [ 418.981437][T23398] loop1: partition table beyond EOD, truncated [ 419.047007][T23398] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 419.064428][T23489] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 419.133731][T23398] loop1: detected capacity change from 5 to 0 [ 419.169209][T23492] FAT-fs (loop0): Unrecognized mount option "func=FILE_MMAP" or missing value [ 419.193384][T23489] bond24 (unregistering): Released all slaves 11:47:32 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x168}]) 11:47:32 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) getresuid(&(0x7f0000000200), 0x0, 0x0) 11:47:32 executing program 2: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0xb6500, 0x0) 11:47:32 executing program 0: setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), 0xfffffffffffffefd) 11:47:32 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:47:32 executing program 3: syz_read_part_table(0x0, 0x3, &(0x7f0000000340)=[{}, {0x0, 0x0, 0x58e}, {0x0, 0x0, 0x96}]) [ 419.451887][T23580] loop4: detected capacity change from 264192 to 0 11:47:32 executing program 0: perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 419.510350][T23591] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:32 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:32 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x41, 0x0, 0x0) 11:47:32 executing program 1: waitid(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) [ 419.646893][T23616] bond24 (unregistering): Released all slaves [ 419.675585][T23630] loop3: detected capacity change from 5 to 0 11:47:32 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x168}]) [ 419.757779][T23630] Dev loop3: unable to read RDB block 5 [ 419.764756][T23630] loop3: unable to read partition table [ 419.774126][T23630] loop3: partition table beyond EOD, truncated [ 419.784988][T23630] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 11:47:32 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0xb, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7d3a7bf6"}, 0x0, 0x0, @fd}) [ 419.834080][T23630] loop3: detected capacity change from 5 to 0 11:47:32 executing program 1: add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', 0x0, 0x0, 0x0, 0x0) 11:47:32 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:47:32 executing program 0: syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) [ 419.888384][T23630] Dev loop3: unable to read RDB block 5 [ 419.894161][T23630] loop3: unable to read partition table [ 419.900131][T23630] loop3: partition table beyond EOD, truncated [ 419.907360][T23630] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 419.909975][T23673] loop4: detected capacity change from 264192 to 0 11:47:32 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x86001, 0x0) 11:47:33 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:47:33 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3bcb0940"}}) [ 420.117448][T23687] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:33 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1a4}]) 11:47:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x22, &(0x7f0000000400)) 11:47:33 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 420.314473][T23716] bond24 (unregistering): Released all slaves [ 420.348524][T23737] loop4: detected capacity change from 264192 to 0 11:47:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x56cc, 0x5, &(0x7f00000015c0)=[{&(0x7f00000002c0)="2c0c04b9fcb38ba9a24e4433666af314226997fa1e138f81d4d42dfd36f1cf42e925c1f9dda3996d35ec858404611c17474eced43d59dde4243aae52b14e18", 0x3f, 0x7}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x5}, {0x0, 0x0, 0x3ff}, {0x0, 0x0, 0x100}], 0x40, &(0x7f0000001680)={[{@uni_xlate='uni_xlate=1'}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@utf8no='utf8=0'}], [{@uid_lt={'uid<'}}, {@appraise_type='appraise_type=imasig'}]}) 11:47:33 executing program 0: sched_rr_get_interval(0x0, 0xfffffffffffffffe) 11:47:33 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:47:33 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1a4}]) 11:47:33 executing program 2: perf_event_open$cgroup(&(0x7f0000002300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 420.650902][T23786] loop3: detected capacity change from 43 to 0 11:47:33 executing program 1: perf_event_open$cgroup(&(0x7f0000002100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) [ 420.696599][T23786] FAT-fs (loop3): Unrecognized mount option "uid<00000000000000000000" or missing value [ 420.717236][T23790] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)) [ 420.751323][T23786] loop3: detected capacity change from 43 to 0 [ 420.759185][T23786] FAT-fs (loop3): Unrecognized mount option "uid<00000000000000000000" or missing value 11:47:33 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) 11:47:33 executing program 3: perf_event_open$cgroup(&(0x7f0000002300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8bf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) [ 420.830488][T23801] loop4: detected capacity change from 264192 to 0 [ 420.869859][T23798] bond24 (unregistering): Released all slaves 11:47:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0b42f0b6c2efab0e91f6fe5050bc0a1139ec1f"}) [ 420.989198][T23846] FAT-fs (loop0): bogus number of reserved sectors [ 421.035169][T23846] FAT-fs (loop0): Can't find a valid FAT filesystem 11:47:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x3d0, 0x118, 0x118, 0xffffffff, 0x118, 0x398, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x0, 0x28dff7a876b2a4f1}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @port, @gre_key}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @broadcast, @rand_addr, @port, @icmp_id}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 11:47:34 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="92943f5c016d3c3b71553fcee21b213fc38b4dc05b80cda6f39800da7802f8f3b37eb175c5c209718cc20664dfbf39074e4cccd6df5d1bd6f01fe4e7af7339c27c83d1dee29af041cb8ad767ae3e9025e4e14923cafa922195e1b849e7e150f7494373afbc132801776659fdc8a20e364ac66500abc9d8be2428eeb9469ce539cae715ffb4a975a19ebdb2ba312808a073e67d5fda0bcc9fe6e26f474bc8bbb303fb4124d9e87f44f7523ab709d184d60e07eaf60dd67297400b864de8eb1db95db27f25a499827d340beadada64bcb86125dd0309fca55eaf83bfe7ae96131ef2d2051be37a054760bb454665535d8758f1b87ea14f5ca9c5ebb85bea1aecaa9afd176d0bd548db11e9fe41179f40d1b08bd39ce28c23f0b455abc5766f98429d3f25f12a2e9230e058549638144abb8fd0d03dc36094fee154406befaf7dcee546c0da522c2c5ea1b710a54594921313ff961e0e1cb84d1e243fb006a3cb66b306021e4454f1a4f59de000acac6c8efdf4a27b65316c7bc350db9ef64e585c3c62fddf22ea3cad7fad12c89ff1c7602f4928d6eaec06182a7bbf522006b1675364d5fb", 0x1a4}]) 11:47:34 executing program 0: request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='\x00', 0xfffffffffffffff9) 11:47:34 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x13, r0, 0x10000000) 11:47:34 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:47:34 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)) 11:47:34 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000780), &(0x7f00000007c0)=0x4) [ 421.290987][T23893] loop4: detected capacity change from 264192 to 0 [ 421.305124][T23892] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000240)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3816d3f0"}, 0x0, 0x0, @planes=0x0}) 11:47:34 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000080)={0x0, "b7a1bc36d1acf3a8e0dd6a47b030c5365a8c37b7e673e3e59eae1da04496b73a5cf395ca29a9b12abf3a5bb2c0f3e97fa5a601da76c0005159125dc1270bf59d"}, 0x48, 0xfffffffffffffffd) 11:47:34 executing program 1: select(0x40, &(0x7f0000000280), 0x0, 0x0, 0x0) 11:47:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x2c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7, 0x4, 0x0, 0x7, 0x6, 0x2], 0x0, 0x2}, {0x0, [0x1, 0x6, 0x4, 0x1, 0x4], 0x6, 0x5}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x5, "0185", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x189800, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f00000005c0)) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x243000, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="28008363cfcf591d77fbe8f4c4c2840000", @ANYRES16=0x0, @ANYBLOB="000127bd00000000df25010000001400078808000100", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8851) accept4(r0, 0x0, 0x0, 0x800) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ocfs2_control\x00', 0xc120, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000540)={0x1}) r4 = socket$inet_dccp(0x2, 0x6, 0x0) accept4(r4, &(0x7f0000000680)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0xc00) [ 421.504292][T23899] bond24 (unregistering): Released all slaves 11:47:34 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1c2}]) [ 421.613969][T23972] x_tables: duplicate underflow at hook 2 11:47:34 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:47:34 executing program 2: syz_80211_inject_frame(&(0x7f0000001a80)=@device_b, &(0x7f0000001ac0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xf}, {}, @device_b, @initial, @device_b}}, {@type00={{}, {}, @broadcast, @device_b}}}}}, 0x38) [ 421.713634][T23980] loop4: detected capacity change from 264192 to 0 [ 421.727868][T23972] x_tables: duplicate underflow at hook 2 11:47:34 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000180)={0x0, "661c4735e68b499cd1313c457a2e93868ca9dd9007dd3e2cd9e49b3814af660388e2921c339498fe33e6c9f28c01592f8c78b330f8bdece38eca63b42fb01da1"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0x0, r0) [ 421.803889][T23992] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) [ 421.916983][T24022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:47:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x2c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7, 0x4, 0x0, 0x7], 0x5, 0x2}, {0x3, [0x1, 0x6, 0x4, 0x0, 0x0, 0x2], 0x6, 0x5}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x5, "0185", 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x1) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000005c0)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcsa\x00', 0x243000, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x0) accept4(r0, 0x0, 0x0, 0x800) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000540)={0x1, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000580)={0x4b7, r4}) socket$inet_dccp(0x2, 0x6, 0x0) 11:47:34 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1c2}]) [ 421.960547][T24012] bond24 (unregistering): Released all slaves 11:47:35 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10000000) [ 422.028310][T24042] x_tables: duplicate underflow at hook 2 [ 422.077502][T24042] x_tables: duplicate underflow at hook 2 [ 422.093525][T24070] loop4: detected capacity change from 264192 to 0 11:47:35 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) accept4(r0, 0x0, 0x0, 0x0) 11:47:35 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) [ 422.242057][T24022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:47:35 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, 0x0, &(0x7f0000000040)) 11:47:35 executing program 3: semget(0x0, 0x0, 0x220) 11:47:35 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1c2}]) 11:47:35 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000480)={0x80000000}, 0x8) 11:47:35 executing program 0: add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="10", 0x1, 0xfffffffffffffffb) [ 422.469188][T24111] bond24 (unregistering): Released all slaves 11:47:35 executing program 2: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f00000015c0)=[{0x0}], 0x0, 0x0) 11:47:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000240)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @sliced}) [ 422.639060][T24160] loop4: detected capacity change from 264192 to 0 11:47:35 executing program 1: perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:47:35 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1d1}]) 11:47:35 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:47:35 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)="d5", 0x1}]) 11:47:35 executing program 0: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/btrfs-control\x00', 0x2c6900, 0x0) 11:47:35 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x10060, 0x0, 0x0) [ 422.863492][T24179] validate_nla: 1 callbacks suppressed [ 422.863508][T24179] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 422.875829][T24176] loop4: detected capacity change from 264192 to 0 11:47:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) [ 422.919068][T24179] bond24 (unregistering): Released all slaves 11:47:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) 11:47:36 executing program 2: perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x952, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:47:36 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:47:36 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) 11:47:36 executing program 1: request_key(&(0x7f0000000740)='big_key\x00', 0x0, 0x0, 0xfffffffffffffffa) 11:47:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f00000024c0)={0x0, 0x989680}) 11:47:36 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1d1}]) 11:47:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffff1a5b, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="e5fd", 0x2, 0x1}, {&(0x7f0000000100)="e52850a5aa5f0abe0db9e2026d1c6c20e8da74736960f5df1d1b46566451a3ca33a823bede4ce1ed7b678726d09ae3cbfa980a1e52e6d2d18e9f7af8d011618e87f0ef6c23c97eda9c8d9da30a634f90a506042aeb4bac3ba6bc4b65b091f26f009ed2d668c6772d0456f465b948bcd7885f88f1e04154f20e19d30ce0d4cb205e6b8af4536df3900749e16e37d45763ef585e3be435283d99dea0ed6f8f4db7f64bd1bee6aa57b884e4", 0xaa, 0x4}], 0x8400, &(0x7f0000000200)={[{@utf8no='utf8=0'}], [{@uid_gt={'uid>', 0xee01}}]}) [ 423.245063][T24268] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:36 executing program 1: add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) 11:47:36 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/btrfs-control\x00', 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r0, 0x0) [ 423.362317][T24302] loop4: detected capacity change from 264192 to 0 11:47:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "d72575246ba5ba57"}) [ 423.442706][T24275] bond24 (unregistering): Released all slaves [ 423.454239][T24314] loop0: detected capacity change from 264192 to 0 11:47:36 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 11:47:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "65e03315fb2d366c49190e31a515dcb3e93a04"}) 11:47:36 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00"], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:47:36 executing program 2: clock_gettime(0x1, &(0x7f0000000340)) 11:47:36 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1d1}]) [ 423.614117][T24314] loop0: detected capacity change from 264192 to 0 11:47:36 executing program 0: getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) 11:47:36 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x430082, 0x0) [ 423.738566][T24370] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 423.758778][T24372] loop4: detected capacity change from 264192 to 0 11:47:36 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/btrfs-control\x00', 0x204100, 0x0) syz_read_part_table(0xfffffffffffffff8, 0x3, &(0x7f0000000200)=[{&(0x7f0000000100)="d5885eb2f0ee7e981081dfaa27f8636254f21a770fadec5b888edc34b61bc85c554710c59befc24d7c7def6769c395e6c41f9bfd2a9e8856bdd3f1d209c582e8f1eaceb402ef0c080a1e03a736877aea5ff3c106ca5298a8da57ec8f4eeb16d5e5f4d82914", 0x65, 0x20}, {&(0x7f0000000180)="038697ef33d02976e1c9ad235bf19cd55d3370592e91a19832f3832a2ebac10cb843d9ba28381e9e360c295522c046d114587daef4cd70f3a0401b191e130ee8dd9d6abcb1a8d52bfb2f38", 0x4b, 0x100000000}, {&(0x7f0000000a80)="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", 0xffe, 0x1}]) accept4$llc(r0, &(0x7f00000006c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000700)=0x10, 0x800) [ 423.872211][T24370] bond24 (unregistering): Released all slaves 11:47:36 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="92943f5c016d3c3b71553fcee21b213fc38b4dc05b80cda6f39800da7802f8f3b37eb175c5c209718cc20664dfbf39074e4cccd6df5d1bd6f01fe4e7af7339c27c83d1dee29af041cb8ad767ae3e9025e4e14923cafa922195e1b849e7e150f7494373afbc132801776659fdc8a20e364ac66500abc9d8be2428eeb9469ce539cae715ffb4a975a19ebdb2ba312808a073e67d5fda0bcc9fe6e26f474bc8bbb303fb4124d9e87f44f7523ab709d184d60e07eaf60dd67297400b864de8eb1db95db27f25a499827d340beadada64bcb86125dd0309fca55eaf83bfe7ae96131ef2d2051be37a054760bb454665535d8758f1b87ea14f5ca9c5ebb85bea1aecaa9afd176d0bd548db11e9fe41179f40d1b08bd39ce28c23f0b455abc5766f98429d3f25f12a2e9230e058549638144abb8fd0d03dc36094fee154406befaf7dcee546c0da522c2c5ea1b710a54594921313ff961e0e1cb84d1e243fb006a3cb66b306021e4454f1a4f59de000acac6c8efdf4a27b65316c7bc350db9ef64e585c3c62fddf22ea3cad7fad12c89ff1c7602f4928d6eaec06182a7bbf522006b1675364d5fbf7ea8dac490ddad2aaa0bbd62b13a92e7f61765b78ad6d03145f18949baaf7ac438a5362fea9ce1c34ad0ab8b68851087b626d74", 0x1d8}]) 11:47:36 executing program 0: process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 423.983999][T24452] loop2: detected capacity change from 264192 to 0 [ 423.996024][ T9823] usb 4-1: new high-speed USB device number 71 using dummy_hcd 11:47:37 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00"], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:47:37 executing program 1: waitid(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000180)) [ 424.126180][T24459] loop4: detected capacity change from 264192 to 0 [ 424.154679][T24467] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 424.236008][ T9823] usb 4-1: Using ep0 maxpacket: 32 [ 424.243920][T24467] bond24 (unregistering): Released all slaves [ 424.356067][ T9823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 424.545956][ T9823] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 424.570151][ T9823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.606178][ T9823] usb 4-1: Product: syz [ 424.625694][ T9823] usb 4-1: Manufacturer: syz [ 424.645538][ T9823] usb 4-1: SerialNumber: syz [ 424.652262][ T9823] usb 4-1: config 0 descriptor?? [ 424.717008][ T9823] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 424.767082][ T9823] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 424.928919][ T9823] usb 4-1: USB disconnect, device number 71 [ 424.935573][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 424.956085][ T9823] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 425.755600][ T7] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 425.995659][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 426.116449][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 426.285627][ T7] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 426.295353][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.305915][ T7] usb 4-1: Product: syz [ 426.310102][ T7] usb 4-1: Manufacturer: syz [ 426.314689][ T7] usb 4-1: SerialNumber: syz [ 426.324328][ T7] usb 4-1: config 0 descriptor?? [ 426.367074][ T7] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 426.378928][ T7] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 11:47:39 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 11:47:39 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr\x00') 11:47:39 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1d1}]) 11:47:39 executing program 1: perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x952, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:47:39 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:47:39 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00"], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) [ 426.567275][T12103] usb 4-1: USB disconnect, device number 72 [ 426.590123][T12103] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 426.648967][T24582] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:39 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') 11:47:39 executing program 1: mq_open(&(0x7f0000000040)='{[].J&\x00', 0x0, 0x0, 0x0) [ 426.759481][T24582] bond24 (unregistering): Released all slaves [ 426.767468][T24620] loop4: detected capacity change from 264192 to 0 11:47:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16], 0x14}}, 0x0) 11:47:39 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1d1}]) 11:47:39 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2, 0x0) 11:47:40 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) [ 427.013541][T24669] loop4: detected capacity change from 264192 to 0 [ 427.176390][T12103] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 427.213138][T24678] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 427.368347][T24703] bond11: (slave bridge92): Enslaving as a backup interface with a down link [ 427.414445][T24678] bond24 (unregistering): Released all slaves [ 427.435677][T12103] usb 4-1: Using ep0 maxpacket: 32 [ 427.555784][T12103] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 427.725594][T12103] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 427.734754][T12103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.743946][T12103] usb 4-1: Product: syz [ 427.748543][T12103] usb 4-1: Manufacturer: syz [ 427.753150][T12103] usb 4-1: SerialNumber: syz [ 427.760703][T12103] usb 4-1: config 0 descriptor?? [ 427.810056][T12103] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 427.821922][T12103] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 428.024950][ T19] usb 4-1: USB disconnect, device number 73 [ 428.037724][ T19] ldusb 4-1:0.0: LD USB Device #0 now disconnected 11:47:41 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0']) 11:47:41 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x4, &(0x7f0000000800)=[{&(0x7f0000000440)="f2", 0x1}, {&(0x7f0000000700)='t', 0x1, 0xffffffffffffff80}, {&(0x7f0000000740)='Y', 0x1, 0x76f7}, {&(0x7f00000007c0)="c85d", 0x2, 0xffffffff}], 0x0, 0x0) 11:47:41 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ptmx\x00', 0x0, 0x0) 11:47:41 executing program 0: socket(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xe5}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x0) 11:47:41 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1d1}]) 11:47:41 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) [ 428.629073][T24781] loop1: detected capacity change from 264192 to 0 [ 428.633689][T24783] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 428.662441][T24780] loop4: detected capacity change from 264192 to 0 [ 428.708737][T24796] fuse: Invalid rootmode 11:47:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', 0x0, 0x0, 0x3, &(0x7f00000015c0)=[{&(0x7f00000002c0)=',', 0x1}, {&(0x7f0000000300)="bd", 0x1}, {&(0x7f00000013c0)="da", 0x1, 0xffffffffffffff01}], 0x0, &(0x7f0000001680)={[{@uni_xlate='uni_xlate=1'}], [{@appraise_type='appraise_type=imasig'}]}) 11:47:41 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000000c0)={0x33, 0x6, 0x0, {0x0, 0x0, 0xa, 0x0, '/dev/fuse\x00'}}, 0x33) 11:47:41 executing program 0: syz_io_uring_setup(0x6204, &(0x7f0000000000), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) [ 428.813575][T24795] bond11: (slave bridge93): Enslaving as a backup interface with a down link 11:47:41 executing program 3: perf_event_open$cgroup(&(0x7f0000002300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8040, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:47:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002380)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}}], 0x1, 0x0, 0x0) 11:47:41 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1d5}]) 11:47:41 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x2, 0x4}) [ 428.939249][T24783] bond24 (unregistering): Released all slaves [ 429.039905][T24866] loop1: detected capacity change from 16383 to 0 11:47:42 executing program 0: add_key$fscrypt_v1(&(0x7f0000000900)='logon\x00', 0x0, 0x0, 0x0, 0x0) [ 429.123028][T24866] loop1: detected capacity change from 16383 to 0 11:47:42 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) 11:47:42 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:47:42 executing program 1: stat(&(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) 11:47:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001500)={&(0x7f0000000040), 0xc, &(0x7f00000014c0)={&(0x7f0000000080)=ANY=[], 0xc8}}, 0x0) [ 429.204769][T24892] loop4: detected capacity change from 264192 to 0 [ 429.368551][T24908] fuse: Bad value for 'fd' 11:47:42 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1d2}]) 11:47:42 executing program 3: perf_event_open$cgroup(&(0x7f0000002300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:47:42 executing program 0: openat$autofs(0xffffffffffffff9c, 0x0, 0x454000, 0x0) [ 429.394284][T24912] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:42 executing program 1: add_key(&(0x7f0000000480)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='/dev/full\x00', 0x0) [ 429.525909][T24915] bond11: (slave bridge94): Enslaving as a backup interface with a down link [ 429.562254][T24912] bond24 (unregistering): Released all slaves [ 429.583951][T24955] loop4: detected capacity change from 264192 to 0 11:47:42 executing program 2: perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:47:42 executing program 3: add_key(&(0x7f0000000480)='cifs.idmap\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="1e", 0x1, 0xffffffffffffffff) 11:47:42 executing program 0: syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX]) 11:47:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000240)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) 11:47:42 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1d2}]) 11:47:42 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:42 executing program 0: mq_open(&(0x7f0000000040)='{[].J&\x00', 0x40, 0x0, &(0x7f00000000c0)={0x800, 0xbdc8, 0xfff, 0x5}) 11:47:42 executing program 2: keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='8\xa2:+\x00', 0x0) [ 429.885399][T25006] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 429.900645][T25010] loop4: detected capacity change from 264192 to 0 [ 429.902279][T25009] fuse: Unknown parameter '0xffffffffffffffff' [ 429.914957][T25009] fuse: Unknown parameter '0xffffffffffffffff' 11:47:42 executing program 3: syz_read_part_table(0xfffffffffffffff8, 0x0, 0x0) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x800) 11:47:42 executing program 1: clock_gettime(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x2c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x7, 0x4, 0x0, 0x7, 0x0, 0x2], 0x5, 0x2}, {0x3, [0x1, 0x6, 0x4, 0x1, 0x4, 0x2], 0x6, 0x5}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x5, "0185", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x189800, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f00000005c0)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcsa\x00', 0x243000, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x8851) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ocfs2_control\x00', 0xc120, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000540)={0x1, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f0000000580)={0x4b7, r5}) socket$inet_dccp(0x2, 0x6, 0x0) [ 430.124828][T25013] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:43 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="92943f5c016d3c3b71553fcee21b213fc38b4dc05b80cda6f39800da7802f8f3b37eb175c5c209718cc20664dfbf39074e4cccd6df5d1bd6f01fe4e7af7339c27c83d1dee29af041cb8ad767ae3e9025e4e14923cafa922195e1b849e7e150f7494373afbc132801776659fdc8a20e364ac66500abc9d8be2428eeb9469ce539cae715ffb4a975a19ebdb2ba312808a073e67d5fda0bcc9fe6e26f474bc8bbb303fb4124d9e87f44f7523ab709d184d60e07eaf60dd67297400b864de8eb1db95db27f25a499827d340beadada64bcb86125dd0309fca55eaf83bfe7ae96131ef2d2051be37a054760bb454665535d8758f1b87ea14f5ca9c5ebb85bea1aecaa9afd176d0bd548db11e9fe41179f40d1b08bd39ce28c23f0b455abc5766f98429d3f25f12a2e9230e058549638144abb8fd0d03dc36094fee154406befaf7dcee546c0da522c2c5ea1b710a54594921313ff961e0e1cb84d1e243fb006a3cb66b306021e4454f1a4f59de000acac6c8efdf4a27b65316c7bc350db9ef64e585c3c62fddf22ea3cad7fad12c89ff1c7602f4928d6eaec06182a7bbf522006b1675364d5fbf7ea8dac490ddad2aaa0bbd62b13a92e7f61765b78ad6d03145f18949baaf7ac438a5362fea9ce1c34ad0ab8b688", 0x1d2}]) 11:47:43 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) connect$rxrpc(r0, 0x0, 0x0) [ 430.165633][T25035] bond24 (unregistering): Released all slaves 11:47:43 executing program 1: request_key(0x0, 0x0, 0x0, 0xfffffffffffffffa) [ 430.227160][T25068] loop3: detected capacity change from 264192 to 0 [ 430.259083][T25101] x_tables: duplicate underflow at hook 2 11:47:43 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) [ 430.327030][T25101] x_tables: duplicate underflow at hook 2 [ 430.345103][T25107] loop4: detected capacity change from 264192 to 0 11:47:43 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x0, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:43 executing program 1: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ocfs2_control\x00', 0x0, 0x0) 11:47:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x49, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x40305828, 0x0) 11:47:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', 0x0, 0x0, 0x1, &(0x7f00000015c0)=[{0x0}], 0x0, &(0x7f0000001680)) 11:47:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 430.477152][T25123] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) [ 430.578983][T25123] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:43 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="92943f5c016d3c3b71553fcee21b213fc38b4dc05b80cda6f39800da7802f8f3b37eb175c5c209718cc20664dfbf39074e4cccd6df5d1bd6f01fe4e7af7339c27c83d1dee29af041cb8ad767ae3e9025e4e14923cafa922195e1b849e7e150f7494373afbc132801776659fdc8a20e364ac66500abc9d8be2428eeb9469ce539cae715ffb4a975a19ebdb2ba312808a073e67d5fda0bcc9fe6e26f474bc8bbb303fb4124d9e87f44f7523ab709d184d60e07eaf60dd67297400b864de8eb1db95db27f25a499827d340beadada64bcb86125dd0309fca55eaf83bfe7ae96131ef2d2051be37a054760bb454665535d8758f1b87ea14f5ca9c5ebb85bea1aecaa9afd176d0bd548db11e9fe41179f40d1b08bd39ce28c23f0b455abc5766f98429d3f25f12a2e9230e058549638144abb8fd0d03dc36094fee154406befaf7dcee546c0da522c2c5ea1b710a54594921313ff961e0e1cb84d1e243fb006a3cb66b306021e4454f1a4f59de000acac6c8efdf4a27b65316c7bc350db9ef64e585c3c62fddf22ea3cad7fad12c89ff1c7602f4928d6eaec06182a7bbf522006b1675364d5fbf7ea8dac490ddad2aaa0bbd62b13a92e7f61765b78ad6d03145f18949baaf7ac438a5362fea9ce1c34ad0ab8b6885108", 0x1d4}]) [ 430.647349][T25140] bond24 (unregistering): Released all slaves 11:47:43 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$snddsp(r0, 0x0, 0x0) 11:47:43 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) 11:47:43 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000016c0)={0x0, @private}, &(0x7f0000001700)=0xc) [ 430.879179][T25208] loop4: detected capacity change from 264192 to 0 11:47:43 executing program 1: io_setup(0x8, &(0x7f0000001700)) io_setup(0x4, &(0x7f0000003f80)) 11:47:44 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1d3}]) 11:47:44 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000240)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @sliced={0x0, [0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}) 11:47:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x370, 0x118, 0x118, 0xffffffff, 0x118, 0x398, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'macvtap0\x00', 'vlan0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @port, @gre_key}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @broadcast, @rand_addr, @port, @icmp_id}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) [ 430.998968][T25217] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:44 executing program 2: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000400)={0x0, 0x0, 0x0}) io_setup(0x8, &(0x7f0000001700)) [ 431.087124][T25217] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:44 executing program 3: syz_mount_image$nfs(&(0x7f0000000300)='nfs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000004c0)) [ 431.158831][T25217] bond24 (unregistering): Released all slaves [ 431.180031][T25264] loop4: detected capacity change from 264192 to 0 11:47:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x1, &(0x7f00000001c0)) 11:47:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={0x0, @generic={0x0, "eb7092717ec30085fb523aff6011"}, @xdp, @vsock}) 11:47:44 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="92943f5c016d3c3b71553fcee21b213fc38b4dc05b80cda6f39800da7802f8f3b37eb175c5c209718cc20664dfbf39074e4cccd6df5d1bd6f01fe4e7af7339c27c83d1dee29af041cb8ad767ae3e9025e4e14923cafa922195e1b849e7e150f7494373afbc132801776659fdc8a20e364ac66500abc9d8be2428eeb9469ce539cae715ffb4a975a19ebdb2ba312808a073e67d5fda0bcc9fe6e26f474bc8bbb303fb4124d9e87f44f7523ab709d184d60e07eaf60dd67297400b864de8eb1db95db27f25a499827d340beadada64bcb86125dd0309fca55eaf83bfe7ae96131ef2d2051be37a054760bb454665535d8758f1b87ea14f5ca9c5ebb85bea1aecaa9afd176d0bd548db11e9fe41179f40d1b08bd39ce28c23f0b455abc5766f98429d3f25f12a2e9230e058549638144abb8fd0d03dc36094fee154406befaf7dcee546c0da522c2c5ea1b710a54594921313ff961e0e1cb84d1e243fb006a3cb66b306021e4454f1a4f59de000acac6c8efdf4a27b65316c7bc350db9ef64e585c3c62fddf22ea3cad7fad12c89ff1c7602f4928d6eaec06182a7bbf522006b1675364d5fbf7ea8dac490ddad2aaa0bbd62b13a92e7f61765b78ad6d03145f18949baaf7ac438a5362fea9ce1c34ad0ab8b688", 0x1d2}]) 11:47:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f00000001c0)) 11:47:44 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:44 executing program 3: getrusage(0xffffffffffffffff, &(0x7f0000000040)) 11:47:44 executing program 1: io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={[0x4]}, 0x8}) [ 431.441274][T25310] FAT-fs (loop0): bogus number of reserved sectors [ 431.489067][T25310] FAT-fs (loop0): Can't find a valid FAT filesystem [ 431.499746][T25324] loop4: detected capacity change from 264192 to 0 11:47:44 executing program 2: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/btrfs-control\x00', 0x0, 0x0) socketpair(0x39, 0x0, 0x0, &(0x7f00000000c0)) 11:47:44 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)) 11:47:44 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x20004, 0x0) [ 431.547121][T25327] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 431.602739][T25327] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 431.618463][T25327] bond24 (unregistering): Released all slaves 11:47:44 executing program 2: add_key(&(0x7f0000000480)='cifs.idmap\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 11:47:44 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) [ 431.704151][T25310] FAT-fs (loop0): bogus number of reserved sectors [ 431.734069][T25310] FAT-fs (loop0): Can't find a valid FAT filesystem 11:47:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, "d72575246ba5ba57"}) 11:47:44 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1d2}]) 11:47:44 executing program 3: sched_rr_get_interval(0x0, &(0x7f0000000000)) waitid(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 11:47:44 executing program 1: r0 = socket(0x1e, 0x1, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) [ 431.867004][T25408] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:44 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000240)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @sliced}) 11:47:44 executing program 2: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x3, &(0x7f0000000800)=[{&(0x7f0000000440)="f2", 0x1}, {&(0x7f0000000700)='t', 0x1, 0xffffffffffffff80}, {&(0x7f00000007c0)="c8", 0x1}], 0x0, 0x0) [ 431.946885][T25442] loop4: detected capacity change from 264192 to 0 [ 431.978608][T25441] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:45 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x3, &(0x7f0000000800)=[{&(0x7f0000000440)="f2", 0x1}, {&(0x7f0000000700)='t', 0x1, 0xffffffffffffff80}, {&(0x7f0000000740)='Y', 0x1, 0x76f7}], 0x0, 0x0) 11:47:45 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 432.042452][T25408] bond24 (unregistering): Released all slaves 11:47:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000140)) 11:47:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:45 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000000a80)="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", 0x1d2}]) [ 432.233056][T25496] loop2: detected capacity change from 16383 to 0 11:47:45 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x69, 0xfd000007, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) [ 432.283639][T25506] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 432.285481][T25502] loop1: detected capacity change from 16383 to 0 11:47:45 executing program 3: socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 432.356988][T25512] loop4: detected capacity change from 264192 to 0 [ 432.401907][T25522] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 432.424227][T25541] bond24 (unregistering): Released all slaves 11:47:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x0) 11:47:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:45 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ptmx\x00', 0x8040, 0x0) 11:47:45 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000a80)="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", 0x1d3}]) 11:47:45 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @can, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="1abc9eb63780"}, @rc={0x1f, @fixed}}) 11:47:45 executing program 3: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000480)='cifs.idmap\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="1e4af5eba5346834583facdd3dd0ba9a0ab48608a94880f957c2cf6e6c6792edce", 0x21, 0xffffffffffffffff) [ 432.716378][T25591] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:45 executing program 2: syz_mount_image$fuse(&(0x7f0000000280)='fuse\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee00}}) [ 432.819604][T25599] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 432.857741][T25599] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:45 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000a80)="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", 0x1d3}]) 11:47:45 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x2, &(0x7f0000000380)=@raw=[@map={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:47:45 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0x0, 0x0) [ 432.927240][T25636] bond24 (unregistering): Released all slaves 11:47:45 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @can, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="1abc9eb63780"}, @rc={0x1f, @fixed}}) [ 433.043905][T25678] fuse: Bad value for 'fd' [ 433.055058][T25678] fuse: Bad value for 'fd' 11:47:46 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x101000, 0x0) 11:47:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x2, &(0x7f0000000380)=@raw=[@map={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0xe7, &(0x7f0000000400)=""/231, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580), 0x10}, 0x78) 11:47:46 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:46 executing program 2: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4c800, 0x0) 11:47:46 executing program 0: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000010740)=""/122) 11:47:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={0x0}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x0) 11:47:46 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000a80)="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", 0x1d3}]) 11:47:46 executing program 1: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000500)={0x0, 0x1f, 0x800, 0x8, 0x19, "4f5898cd4a1a4cd6"}) io_setup(0xe7b1, &(0x7f0000000540)) select(0x40, &(0x7f0000004040)={0x6c8d, 0x2, 0xe8bb, 0x81, 0x1, 0x0, 0x4, 0x200}, &(0x7f0000004080)={0xfd0, 0x48f914bf, 0xffffffff7fffffff, 0x2, 0x98, 0x0, 0x0, 0x7fff}, &(0x7f00000040c0)={0x0, 0x0, 0x569, 0x8000, 0x7, 0x5, 0x4}, &(0x7f0000004140)) 11:47:46 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x2, &(0x7f0000000380)=@raw=[@map={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:47:46 executing program 2: perf_event_open$cgroup(&(0x7f0000002300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8040, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 433.462224][T25699] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:46 executing program 3: perf_event_open$cgroup(&(0x7f0000002300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) 11:47:46 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) [ 433.572906][T25709] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 433.596238][T25709] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 433.617201][T25746] bond24 (unregistering): Released all slaves 11:47:46 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000a80)="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", 0x1d3}]) 11:47:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', 0x0, 0x0, 0x5, &(0x7f00000015c0)=[{&(0x7f00000002c0)=',', 0x1, 0x7}, {&(0x7f0000000300)="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", 0x98f}, {&(0x7f0000001300)}, {&(0x7f00000013c0)="da5f3c64", 0x4, 0xffffffffffffff01}, {0x0, 0x0, 0x3ff}], 0x0, &(0x7f0000001680)={[{@uni_xlate='uni_xlate=1'}]}) 11:47:46 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:46 executing program 1: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x1c1, 0x0) 11:47:46 executing program 0: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x0) 11:47:46 executing program 3: openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000105c0)='/dev/dlm_plock\x00', 0x0, 0x0) 11:47:46 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000a80)="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", 0x1d3}]) 11:47:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001500)={&(0x7f0000000040), 0xc, &(0x7f00000014c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="c8"], 0xc8}}, 0x0) [ 433.962944][T25796] loop2: detected capacity change from 16383 to 0 11:47:47 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002600)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC]) [ 434.047963][T25796] loop2: detected capacity change from 16383 to 0 11:47:47 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:47:47 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) [ 434.124853][T25811] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 434.207391][T25818] fuse: Bad value for 'group_id' 11:47:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) 11:47:47 executing program 3: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_read_part_table(0xfffffffffffffff8, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="038697ef33", 0x5, 0x100000000}, {&(0x7f0000000a80)="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", 0xc00, 0x1}]) accept4$llc(0xffffffffffffffff, &(0x7f00000006c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000700)=0x10, 0x800) 11:47:47 executing program 1: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ocfs2_control\x00', 0xc120, 0x0) [ 434.304187][T25811] bond24 (unregistering): Released all slaves [ 434.384074][T25896] loop3: detected capacity change from 264192 to 0 11:47:47 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:47 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000a80)="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", 0x1d3}]) 11:47:47 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0xb6, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x4}, {0x8000, 0x0, 0x2, 0x5a3d}, {0xbcfd, 0x3}]}) 11:47:47 executing program 0: socket(0x10, 0x2, 0x10000) 11:47:47 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) 11:47:47 executing program 3: select(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) 11:47:47 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 434.591207][T25916] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:47 executing program 4: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xe5}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 434.704193][T25916] bond24 (unregistering): Released all slaves 11:47:47 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000280)='fuse\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee00}}) 11:47:47 executing program 1: add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', 0x0, &(0x7f0000000180)={0x0, "661c4735e68b499cd1313c457a2e93868ca9dd9007dd3e2cd9e49b3814af660388e2921c339498fe33e6c9f28c01592f8c78b330f8bdece38eca63b42fb01da1"}, 0x48, 0xffffffffffffffff) 11:47:47 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[{&(0x7f00000007c0)="c85d", 0x2, 0xffffffff}], 0x0, 0x0) 11:47:47 executing program 2: socket(0x2, 0xa, 0x3) [ 434.824214][T25996] fuse: Bad value for 'group_id' 11:47:47 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:47 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000014000']) 11:47:47 executing program 1: process_vm_readv(0x0, &(0x7f0000001a00)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003bc0)=[{&(0x7f0000001ac0)=""/158, 0x9e}], 0x1, 0x0) 11:47:48 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x100000000}]) [ 434.991515][T26005] loop0: detected capacity change from 264192 to 0 [ 435.030862][T26009] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:48 executing program 4: pipe(&(0x7f0000000440)={0xffffffffffffffff}) ioctl$TCSETSW(r0, 0x5403, 0x0) [ 435.141231][T26009] bond24 (unregistering): Released all slaves [ 435.159446][T26051] loop2: detected capacity change from 264192 to 0 11:47:48 executing program 3: socket(0x2, 0x806, 0x0) 11:47:48 executing program 1: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:47:48 executing program 0: request_key(&(0x7f0000000bc0)='dns_resolver\x00', &(0x7f0000000a40)={'syz', 0x1}, &(0x7f0000000140)='ci\xce\x00\x00\x8f\x04h\xb1=\xcb\x00\x02m\xe5p', 0xfffffffffffffffc) 11:47:48 executing program 4: socket(0x21ba7abec2a5078f, 0x0, 0x0) 11:47:48 executing program 2: getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) 11:47:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) [ 435.667388][T26105] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:48 executing program 2: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x2d2080) 11:47:48 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80c00, 0x0) 11:47:48 executing program 1: syz_mount_image$nfs(&(0x7f0000000300)='nfs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{'gretap0\x00'}]}) 11:47:48 executing program 0: keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='\x00\x00\x00', 0x0) 11:47:48 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x189800, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcsa\x00', 0x243000, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0xc120, 0x0) [ 435.888585][T26112] __nla_validate_parse: 4 callbacks suppressed [ 435.888600][T26112] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 435.954912][T26112] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 435.999550][T26155] nfs: Unknown parameter 'gretap0' 11:47:49 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000006440)={0x77359400}) [ 436.022446][T26134] bond24 (unregistering): Released all slaves 11:47:49 executing program 2: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) [ 436.111545][T26155] nfs: Unknown parameter 'gretap0' 11:47:49 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) connect$l2tp(r0, 0x0, 0x58) 11:47:49 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:49 executing program 1: perf_event_open$cgroup(&(0x7f0000002300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:47:49 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000500)={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fc760fcf"}, 0x0, 0x0, @userptr}) 11:47:49 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) 11:47:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) [ 436.301128][T26215] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@numtail='nonumtail=0'}, {@shortname_winnt='shortname=winnt'}, {@utf8='utf8=1'}]}) 11:47:49 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/btrfs-control\x00', 0x204100, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) [ 436.378265][T26235] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:49 executing program 1: prlimit64(0x0, 0x0, &(0x7f00000015c0), 0x0) clock_gettime(0x2, &(0x7f0000001680)) 11:47:49 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') [ 436.461356][T26215] bond24 (unregistering): Released all slaves [ 436.465626][T26264] FAT-fs (loop3): bogus number of reserved sectors [ 436.474016][T26264] FAT-fs (loop3): Can't find a valid FAT filesystem 11:47:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x6364, 0x0) 11:47:49 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x2c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x7, 0x4, 0x0, 0x7, 0x6, 0x2], 0x5, 0x2}, {0x3, [0x1, 0x6, 0x4, 0x1, 0x4, 0x2], 0x6, 0x5}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x5, "0185", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x189800, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f00000005c0)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcsa\x00', 0x243000, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="28008363cfcf591d77fbe8f4c4c2840000", @ANYRES16=0x0, @ANYBLOB="000127bd00000000df25010000001400078808000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8851) accept4(r0, 0x0, 0x0, 0x800) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ocfs2_control\x00', 0xc120, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000540)={0x1}) [ 436.568829][T26264] FAT-fs (loop3): bogus number of reserved sectors 11:47:49 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xa, 0xffffffffffffffff, 0x0) [ 436.617363][T26264] FAT-fs (loop3): Can't find a valid FAT filesystem [ 436.636149][T26312] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:49 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 11:47:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x6000000b, 0x3}) [ 436.744975][T26314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:49 executing program 1: r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4c0, 0x0) fstat(r0, &(0x7f00000000c0)) 11:47:49 executing program 2: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000400)) io_setup(0xe7b1, &(0x7f0000000540)) 11:47:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 436.808028][T26312] bond24 (unregistering): Released all slaves [ 436.837064][T26356] x_tables: duplicate underflow at hook 2 11:47:49 executing program 0: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/btrfs-control\x00', 0x78542, 0x0) 11:47:50 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:50 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001640)={0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, &(0x7f00000016c0)) 11:47:50 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x8) readlink(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 437.047690][T26356] x_tables: duplicate underflow at hook 2 11:47:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f0000000040)='H', 0x1) 11:47:50 executing program 4: unshare(0x20000000) unshare(0x2020400) [ 437.193603][T26427] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)=@in={0x2, 0x4e24, @private}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="f2", 0x1}], 0x1}}], 0x1, 0x0) 11:47:50 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x25) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 11:47:50 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x8910, &(0x7f00000000c0)) [ 437.410237][T26434] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:50 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}, 0x0) 11:47:50 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1269, 0x400000) [ 437.500008][T26459] bond24 (unregistering): Released all slaves 11:47:50 executing program 1: syz_emit_ethernet(0x4b6, &(0x7f0000002080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff8035"], 0x0) 11:47:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007480)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000074c0)={0x28, 0x26, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x28}], 0x1}, 0x0) 11:47:50 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:50 executing program 4: syz_open_dev$evdev(&(0x7f00000004c0)='/dev/input/event#\x00', 0x0, 0x4000) 11:47:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000002c0)={0x0, 'veth0_vlan\x00', {0x2}, 0x6}) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000200)=""/93, &(0x7f0000000280)=0x5d) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000040)=ANY=[], 0x30) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140)={0xfffffbff}, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0x11}, 0x5}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @loopback}}, 0x7f, [0x2, 0x6, 0x6, 0x1, 0x623, 0x7fff, 0xf315, 0xffffff44]}, 0x5c) sendmmsg$inet6(r1, &(0x7f0000000100)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, [], 0x1}, 0x7ff}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="266cc0eecd100239ea5a4cb7d1a277fee0808cccd09be0733a4518abf1850bb94111110c07ecbb0ed6b5a9618ac2f66835af5677ccfa", 0x36}, {&(0x7f0000000080)="778de7c28f2bc5e552914cdc1770c63b13ece9dac873e7d4f49a37e420b0bb61d5c0c9dde1", 0x25}], 0x2}}], 0x1, 0x20000881) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) 11:47:50 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0xc200, 0x0) 11:47:50 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) read$char_raw(r0, 0x0, 0x0) [ 437.736906][T26523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:47:50 executing program 3: r0 = shmget$private(0x0, 0xd000, 0x0, &(0x7f0000ff3000/0xd000)=nil) shmat(r0, &(0x7f0000ff4000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 437.797686][T26527] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:50 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$tmpfs(&(0x7f0000000c00)='tmpfs\x00', &(0x7f0000000c40)='./file0\x00', 0x100000000, 0x2, &(0x7f0000000d80)=[{&(0x7f0000000c80)="e714390b2fa1fc3590", 0x9, 0x81}, {&(0x7f0000000cc0)="6bc470435947e256af9ff5b4a2753398b78b4841305242c2c31cc27b67360f44959631d1", 0x24, 0x7}], 0x180004, &(0x7f0000002e00)={[], [{@fowner_gt={'fowner>'}}, {@pcr={'pcr', 0x3d, 0x13}}, {@appraise_type='appraise_type=imasig'}, {@appraise='appraise'}, {@fsname={'fsname'}}]}) 11:47:50 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) 11:47:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007480)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000074c0)={0x28, 0x29, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x28}], 0x1}, 0x0) [ 437.926567][T26554] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:51 executing program 0: capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)) socket(0x11, 0x0, 0x0) 11:47:51 executing program 3: capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)) r0 = shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, 0x0) [ 437.981788][T26577] loop4: detected capacity change from 264192 to 0 [ 438.020494][T26527] bond24 (unregistering): Released all slaves 11:47:51 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1d1c4e1c5096746a, 0x0) [ 438.140532][T26622] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure [ 438.159425][T26590] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 438.169354][T26623] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) 11:47:51 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:51 executing program 4: ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$CHAR_RAW_IOOPT(0xffffffffffffffff, 0x1279, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 11:47:51 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x220802, 0x0) 11:47:51 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) 11:47:51 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000001800)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000200)=ANY=[], 0x4d, 0x0) 11:47:51 executing program 0: capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)) socket$inet(0x2, 0x3, 0x0) [ 438.369168][T26641] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:51 executing program 1: capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)) shmget(0x1, 0x1000, 0x78000503, &(0x7f0000fff000/0x1000)=nil) 11:47:51 executing program 4: capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)) chroot(0x0) 11:47:51 executing program 3: capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)) syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0x0) 11:47:51 executing program 2: capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) [ 438.483880][T26653] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:51 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000001800)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) [ 438.613357][T26641] bond24 (unregistering): Released all slaves 11:47:51 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000480)='./file0\x00', 0xee01, 0xee01) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000100)) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f00000004c0)=ANY=[], 0xc8, 0x0) 11:47:51 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:51 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000480)='./file0\x00', 0xee01, 0xee01) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000100)) lsetxattr$trusted_overlay_upper(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 11:47:51 executing program 1: capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)) shmget(0x1, 0x1000, 0x78000503, &(0x7f0000fff000/0x1000)=nil) 11:47:51 executing program 2: capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)) mount$9p_rdma(&(0x7f0000000300)='127.0.0.1\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x0, 0x0) 11:47:51 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) 11:47:51 executing program 4: capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)) socket$inet6(0xa, 0x3, 0x0) 11:47:51 executing program 2: capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)) r0 = shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) 11:47:51 executing program 1: capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)) shmget(0x1, 0x1000, 0x78000503, &(0x7f0000fff000/0x1000)=nil) 11:47:52 executing program 3: r0 = getpid() rt_sigqueueinfo(r0, 0x80, &(0x7f0000000080)={0x0, 0x0, 0x80000080}) [ 438.963904][T26749] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:52 executing program 0: r0 = shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, 0x0) 11:47:52 executing program 4: capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, 0x0) [ 439.096772][T26754] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:52 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000001800)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000480)='./file0\x00', 0xee01, 0xee01) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) [ 439.206627][T26749] bond24 (unregistering): Released all slaves 11:47:52 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:52 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000100)) lsetxattr$trusted_overlay_upper(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 11:47:52 executing program 4: io_setup(0x2c4, &(0x7f0000000480)=0x0) io_submit(r0, 0x0, 0x0) 11:47:52 executing program 1: capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)) shmget(0x1, 0x1000, 0x78000503, &(0x7f0000fff000/0x1000)=nil) 11:47:52 executing program 2: add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 11:47:52 executing program 0: capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)) mlockall(0x3) 11:47:52 executing program 0: capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)) syz_read_part_table(0x0, 0x0, 0x0) 11:47:52 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000480)='./file0\x00', 0xee01, 0xee01) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000100)) truncate(&(0x7f0000000000)='./file0\x00', 0x0) 11:47:52 executing program 1: capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, 0x0) [ 439.462265][T26848] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:52 executing program 3: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x120001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000001280)={0x14, 0x0, 0x400, 0x70bd22, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4081) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) socketpair$unix(0x1, 0x80000000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000020) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000001380)={'ip6_vti0\x00', &(0x7f0000001300)={'syztnl0\x00', 0x0, 0x29, 0x22, 0x0, 0xffff, 0x50, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, 0x1, 0x40, 0x1714}}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x54, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x46d}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x54}}, 0x44400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x6, 0x0) write(r5, &(0x7f0000000180)="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", 0x1000) write$P9_RWSTAT(r4, &(0x7f0000000040)={0x7}, 0x7) 11:47:52 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, 0x0) [ 439.591036][T26848] bond24 (unregistering): Released all slaves 11:47:52 executing program 4: pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0xfffffffffffeffff}, &(0x7f0000000140)={0x77359400}, 0x0) 11:47:52 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2, 0x48}, 0x80) 11:47:52 executing program 3: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x120001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000001280)={0x14, 0x0, 0x400, 0x70bd22, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4081) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) socketpair$unix(0x1, 0x80000000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000020) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000001380)={'ip6_vti0\x00', &(0x7f0000001300)={'syztnl0\x00', 0x0, 0x29, 0x22, 0x0, 0xffff, 0x50, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, 0x1, 0x40, 0x1714}}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x54, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x46d}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x54}}, 0x44400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x6, 0x0) write(r5, &(0x7f0000000180)="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", 0x1000) write$P9_RWSTAT(r4, &(0x7f0000000040)={0x7}, 0x7) 11:47:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0), 0x4) 11:47:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000024000b0f000000522600000000800000", @ANYRES32, @ANYBLOB="00000000ffffffff070000000b0001006d756c7469710000080002"], 0x38}}, 0x0) 11:47:52 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x76, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') syncfs(r0) 11:47:52 executing program 2: r0 = epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x30000018}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)) 11:47:52 executing program 4: pkey_mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000200)) [ 439.945789][T26949] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:53 executing program 1: r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40000014}) pselect6(0x40, &(0x7f0000000100)={0x8}, 0x0, 0x0, 0x0, 0x0) [ 440.054555][T26949] bond24 (unregistering): Released all slaves 11:47:53 executing program 3: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x120001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000001280)={0x14, 0x0, 0x400, 0x70bd22, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4081) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) socketpair$unix(0x1, 0x80000000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000020) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000001380)={'ip6_vti0\x00', &(0x7f0000001300)={'syztnl0\x00', 0x0, 0x29, 0x22, 0x0, 0xffff, 0x50, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, 0x1, 0x40, 0x1714}}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x54, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x46d}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x54}}, 0x44400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x6, 0x0) write(r5, &(0x7f0000000180)="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", 0x1000) write$P9_RWSTAT(r4, &(0x7f0000000040)={0x7}, 0x7) 11:47:53 executing program 1: openat$autofs(0xffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0xc200, 0x0) 11:47:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:47:53 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:53 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'fscrypt:', @auto=[0x36, 0x61, 0x38, 0x36, 0x61, 0x39, 0x31, 0x55, 0x66, 0x32, 0x37, 0x66, 0x39, 0x38, 0x33, 0x63]}, &(0x7f0000000140)={0x0, "a7050e8f913359041d55dc6f4c8cd67371465575665e559ac6119f3f1a1450384d8c9f3a2e6fa649eeabae91d65db5b2972639fd105baafcb7a96093b3bd9187", 0x2b}, 0x48, 0xffffffffffffffff) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='@}\x00', r0) 11:47:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x6, 0x0) write(r2, &(0x7f0000000180)='\'', 0x1) write$P9_RWSTAT(r1, &(0x7f0000000040)={0x7}, 0x7) 11:47:53 executing program 1: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) unlink(&(0x7f0000000080)='./file0\x00') clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = open(0x0, 0x0, 0x0) renameat2(r2, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 11:47:53 executing program 4: creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200002000010d8, 0x187f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 11:47:53 executing program 0: socket$unix(0x1, 0x1, 0x0) io_setup(0x2c4, &(0x7f0000000480)) openat$pfkey(0xffffff9c, &(0x7f0000002800)='/proc/self/net/pfkey\x00', 0x0, 0x0) io_setup(0x4, &(0x7f0000002940)) 11:47:53 executing program 3: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x120001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000001280)={0x14, 0x0, 0x400, 0x70bd22, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4081) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) socketpair$unix(0x1, 0x80000000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000020) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000001380)={'ip6_vti0\x00', &(0x7f0000001300)={'syztnl0\x00', 0x0, 0x29, 0x22, 0x0, 0xffff, 0x50, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, 0x1, 0x40, 0x1714}}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x54, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x46d}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x54}}, 0x44400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x6, 0x0) write(r5, &(0x7f0000000180)="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", 0x1000) write$P9_RWSTAT(r4, &(0x7f0000000040)={0x7}, 0x7) [ 440.510072][T27063] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:53 executing program 4: openat$null(0xffffff9c, &(0x7f0000000900)='/dev/null\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x1}, 0x0, 0x0, &(0x7f0000000180)={0x0}) 11:47:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={0x0}}, 0x0) 11:47:53 executing program 2: io_setup(0x40000000, &(0x7f0000000000)) [ 440.682594][T27093] bond24 (unregistering): Released all slaves 11:47:53 executing program 4: request_key(&(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)='-\':\x00', 0x0) 11:47:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x6e, &(0x7f0000000140)={0x0}}, 0x20000800) 11:47:53 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 11:47:53 executing program 2: io_setup(0x2c4, &(0x7f0000000480)) io_setup(0x4, &(0x7f0000002940)) 11:47:53 executing program 1: add_key$fscrypt_v1(&(0x7f00000000c0)='logon\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 11:47:53 executing program 4: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000100)={0x0, "31345ae9ba55a607b2e8ee92309b0cc588dbfaec6a26d27d99cd63e83df6a8bb0f3f95038372d67d922f7f354ba90d89da5fbd39e1985aa7ce043419f786c760"}, 0x48, 0xfffffffffffffffb) 11:47:53 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)) 11:47:54 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:47:54 executing program 3: mq_open(&(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 11:47:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) [ 441.056748][T27174] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:54 executing program 2: r0 = openat$dir(0xffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) statx(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 11:47:54 executing program 0: umount2(&(0x7f0000000d40)='./file0/file0\x00', 0x0) 11:47:54 executing program 1: r0 = openat$pfkey(0xffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, 0x0) [ 441.233089][T27179] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 441.260514][T27202] bond24 (unregistering): Released all slaves 11:47:54 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:54 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0}}, 0x0) 11:47:54 executing program 2: r0 = epoll_create1(0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20000035}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 11:47:54 executing program 3: io_setup(0x2c4, &(0x7f0000000480)) 11:47:54 executing program 0: faccessat(0xffffffffffffffff, 0x0, 0x100) 11:47:54 executing program 1: keyctl$update(0x2, 0x0, 0x0, 0xe) 11:47:54 executing program 4: getresgid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)) 11:47:54 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x4}) [ 441.537447][T27272] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @local}, 0x0, {0x2, 0x0, @local}}) 11:47:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000240)) 11:47:54 executing program 4: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) unlink(&(0x7f0000000080)='./file0\x00') clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) open(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x240000, 0x1) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 441.664089][T27279] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 11:47:54 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fd/3\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x147042, 0x0) r2 = memfd_create(&(0x7f00000003c0)='iC\xb0#\x00\x00I\x10\xd5s?\f\x92\x80\x9fP\xd2p{\x9a3\x00\x9c\xe0\xc4\x94j).n_\x92I\xaf\x15\v\vG\x8c\x98-\x86\xac\x11\x8coP\xcaq\xf3\xa6C|\\*F\xfarsVE\x19_\xf2\x19\x898\xd5S\xab\xbf\xe9L\xc1\xe3j\x86u\x93\x8a\x16\xf7\r\xc6*\xe2qj\x86\xd1\f=s\xfa\x01\xef\'\xf2m! c \xd1*\xae\x8f!0{\xf6\xf2biU5\x9b0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:54 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0}}, 0x200448d1) 11:47:54 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fd/3\x00') r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x147042, 0x0) r2 = memfd_create(&(0x7f00000003c0)='iC\xb0#\x00\x00I\x10\xd5s?\f\x92\x80\x9fP\xd2p{\x9a3\x00\x9c\xe0\xc4\x94j).n_\x92I\xaf\x15\v\vG\x8c\x98-\x86\xac\x11\x8coP\xcaq\xf3\xa6C|\\*F\xfarsVE\x19_\xf2\x19\x898\xd5S\xab\xbf\xe9L\xc1\xe3j\x86u\x93\x8a\x16\xf7\r\xc6*\xe2qj\x86\xd1\f=s\xfa\x01\xef\'\xf2m! c \xd1*\xae\x8f!0{\xf6\xf2biU5\x9b0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000240)=@framed={{}, [@generic]}, &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x8, 0x10, 0x0}, 0x74) pselect6(0x40, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x309, 0x8}, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x6}, &(0x7f0000000100)={r0, r1+10000000}, 0x0) 11:47:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="8e05e8b2e83d45a63437aca5bb12484e", 0x10) 11:47:56 executing program 0: add_key$fscrypt_v1(&(0x7f0000000740)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) 11:47:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'bond_slave_0\x00'}) 11:47:56 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:56 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 11:47:56 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40000014}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000100)={0xd}, 0x0, 0x0, 0x0, 0x0) [ 443.137584][T27476] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:56 executing program 2: r0 = epoll_create1(0x0) r1 = openat$khugepaged_scan(0xffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000100)={0x8}, 0x0, 0x0, 0x0, 0x0) 11:47:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{}, {0x20000010304}, 0x0, {0x2, 0x0, @dev}}) 11:47:56 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000280)='cifs.spnego\x00', 0x0, 0x0) 11:47:56 executing program 0: openat$pfkey(0xffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x131140, 0x0) [ 443.499033][T27494] bond24 (unregistering): Released all slaves 11:47:56 executing program 4: openat$khugepaged_scan(0xffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x8}, 0x0, 0x0, 0x0, 0x0) 11:47:56 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:56 executing program 1: r0 = openat$null(0xffffff9c, &(0x7f0000000900)='/dev/null\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 11:47:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={0x0, 0x2c, &(0x7f0000000040)={0x0, 0x5d}}, 0x24048884) 11:47:56 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "79905e5869afefb2cc08dd819ad77edc5a8129"}) [ 443.817161][T27571] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:56 executing program 1: r0 = openat$pfkey(0xffffff9c, &(0x7f0000002800)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) [ 444.004383][T27576] bond24 (unregistering): Released all slaves 11:47:57 executing program 3: io_setup(0x0, &(0x7f0000000480)) 11:47:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 11:47:57 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:47:57 executing program 1: openat$null(0xffffff9c, 0x0, 0x721001, 0x0) 11:47:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000a0603000000000000000000000000000500010006000000100007800c00018008000140ac1414000900020073797a30"], 0x38}}, 0x0) 11:47:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) [ 444.295896][T27663] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:57 executing program 4: io_setup(0x4, &(0x7f0000002940)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 11:47:57 executing program 0: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="95", 0x1}, {0x0}], 0x2, 0x0) 11:47:57 executing program 3: mknod(&(0x7f0000002900)='./file0\x00', 0x0, 0x0) 11:47:57 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000300)=@buf={0x0, &(0x7f0000000140)}) 11:47:57 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, r0+10000000}, 0x0) [ 444.423913][T27663] bond24 (unregistering): Released all slaves 11:47:57 executing program 0: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, r0) 11:47:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x4000, 0x0) 11:47:57 executing program 0: add_key$fscrypt_v1(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x61]}, &(0x7f0000000140)={0x0, "a7050e8f913359041d55dc6f4c8cd67371465575665e559ac6119f3f1a1450384d8c9f3a2e6fa649eeabae91d65db5b2972639fd105baafcb7a96093b3bd9187"}, 0x48, 0xffffffffffffffff) 11:47:57 executing program 1: socketpair(0x2, 0xa, 0x2, 0x0) 11:47:57 executing program 3: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) creat(&(0x7f0000008980)='./file0\x00', 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37ea8a011a7f580d, @perf_config_ext, 0x200002000010d8, 0x187f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) unlink(&(0x7f0000000080)='./file0\x00') clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 11:47:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:57 executing program 0: getgroups(0x1, &(0x7f0000000180)=[0xffffffffffffffff]) 11:47:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="980000000107010300000000161b00000000000214"], 0x98}}, 0x0) 11:47:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x20, 0x0, 0x8, 0x201, 0x0, 0x25dfdbff, {}, [@typed={0x4, 0xe, 0x0, 0x0, @binary}, @nested={0x4}, @generic="eb"]}, 0x20}}, 0x0) [ 444.798894][T27757] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 444.857002][T27767] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.4'. 11:47:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00'}) 11:47:57 executing program 4: r0 = socket(0x10, 0x2, 0x9) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) [ 444.962779][T27768] bond24 (unregistering): Released all slaves 11:47:58 executing program 2: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) unlink(&(0x7f0000000080)='./file0\x00') clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 445.017076][T27820] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 11:47:58 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:58 executing program 3: socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 11:47:58 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r1) 11:47:58 executing program 4: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x4340a) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_da_reserve_space\x00', r3}, 0x10) 11:47:58 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x3c5581febb55f9d4, 0x0) [ 445.273315][T27845] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:58 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000001fc0)='ns/ipc\x00') [ 445.479588][T27856] bond24 (unregistering): Released all slaves 11:47:58 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r1) 11:47:58 executing program 3: syz_open_dev$ndb(&(0x7f00000005c0)='/dev/nbd#\x00', 0x0, 0x0) 11:47:58 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:58 executing program 0: sendmsg(0xffffffffffffffff, 0x0, 0x0) getsockname$l2tp6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$zonefs(0x0, 0x0, 0x0, 0x0, &(0x7f0000005a80), 0x0, 0x0) 11:47:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) [ 445.848587][T27944] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 445.960547][T27964] bond24 (unregistering): Released all slaves 11:47:59 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001e00)='/dev/snd/controlC#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000001e40), 0x0, &(0x7f0000001ec0)={0x9}, 0x0, 0x0) 11:47:59 executing program 4: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x4340a) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_da_reserve_space\x00', r3}, 0x10) 11:47:59 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000001cc0)) 11:47:59 executing program 3: syz_open_dev$media(&(0x7f0000001180)='/dev/media#\x00', 0x0, 0x200a00) 11:47:59 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000100005070000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:47:59 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="980000000107010300000000161b0000000000021400024000000000000000080c0006400000000047a564e10c000640000000000000000308000517e1e01f022c00078008000240000001000800024000fbeabe1d2b18192400007f0800014000003462490b00"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x4000844) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x333201, 0x0) [ 446.438182][T28037] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:47:59 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000005c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) [ 446.572739][T28045] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 446.582592][T28045] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.3'. 11:47:59 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r1) 11:47:59 executing program 3: syz_mount_image$btrfs(&(0x7f0000000380)='btrfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)) [ 446.730498][T28080] block nbd0: NBD_DISCONNECT [ 446.736247][T28042] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 446.775957][T28060] bond24 (unregistering): Released all slaves 11:47:59 executing program 0: clock_gettime(0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0) socketpair(0x2, 0xa, 0x0, &(0x7f0000001cc0)) syz_open_dev$sndctrl(&(0x7f0000001e00)='/dev/snd/controlC#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000001e40), &(0x7f0000001e80)={0xffff}, 0x0, &(0x7f0000001f00)={0x77359400}, 0x0) 11:47:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000005c0)='/dev/nbd#\x00', 0x0, 0x0) sendmsg$AUDIT_TRIM(r0, 0x0, 0x0) 11:47:59 executing program 4: clock_gettime(0x0, &(0x7f0000000000)) pselect6(0x0, 0x0, 0x0, &(0x7f00000013c0), &(0x7f0000001400), 0x0) socket(0x28, 0x0, 0x0) socketpair(0x2, 0xa, 0x80, &(0x7f0000001cc0)) syz_open_dev$sndctrl(0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001fc0)='ns/ipc\x00') 11:48:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x1c, 0x0, 0x8, 0x201, 0x0, 0x0, {}, [@nested={0x4}, @generic="eb"]}, 0x1c}}, 0x0) 11:48:00 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000100005070000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:00 executing program 3: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x101780) 11:48:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="980000000107010300000000161b000000000002140002"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 447.362753][T28143] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 447.373147][T28142] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 447.379963][T28144] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:48:00 executing program 2: ioctl$CHAR_RAW_ROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="980000000107010300000000161b0000000000021400024000000000000000080c0006400000000047a564e10c000640000000000000000308000517e1e01f022c00078008000240000001000800024000fbeabe1d2b18192400007f08000140000034"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x4000844) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x0, 0x0) 11:48:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@local, @loopback, @loopback}) [ 447.419181][T28143] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. [ 447.490080][T28166] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 447.509473][T28146] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 11:48:00 executing program 0: syz_open_dev$ndb(&(0x7f00000005c0)='/dev/nbd#\x00', 0x0, 0x81) [ 447.554902][T28166] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. [ 447.593142][T28176] bond24 (unregistering): Released all slaves 11:48:00 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r1) 11:48:00 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f00000001c0)) 11:48:00 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f000000c040)='l2tp\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f000000c140)='/dev/dlm-monitor\x00', 0x0, 0x0) 11:48:00 executing program 0: socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000001e40)={0x3}, 0x0, &(0x7f0000001ec0)={0x9}, &(0x7f0000001f00)={0x77359400}, &(0x7f0000001f80)={&(0x7f0000001f40)={[0x80000001]}, 0x8}) 11:48:00 executing program 4: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0xc2100) 11:48:00 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000100005070000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:00 executing program 2: socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000001e40)={0x3}, 0x0, &(0x7f0000001ec0)={0x9}, &(0x7f0000001f00)={0x77359400}, 0x0) 11:48:00 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$rose(r0, 0x0, 0x0, 0x0) 11:48:00 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x0, 0x0) [ 447.921197][T28236] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:01 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 11:48:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 11:48:01 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000005c0)={"17b35ee1c2ac954b2f2660c91e8d1031"}) [ 448.077824][T28245] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 448.093720][T28282] bond24 (unregistering): Released all slaves 11:48:01 executing program 4: openat$ashmem(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ashmem\x00', 0x10000, 0x0) 11:48:01 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001100)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) 11:48:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000016c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0}}, 0x40884) syz_open_dev$sndctrl(0x0, 0x0, 0x4040) pselect6(0x40, &(0x7f0000001e40)={0x0, 0x4, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) 11:48:01 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:01 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x4, 0x0, 0x1, [{0x4, 0x1}]}}]}]}, 0x34}}, 0x0) 11:48:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x2c, 0x12, 0x0, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4}]}, 0x2c}}, 0x8040) 11:48:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') read$char_raw(r0, &(0x7f0000000200)=ANY=[], 0xbe00) 11:48:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') read$char_raw(r0, &(0x7f0000000200)=ANY=[], 0xbe00) [ 448.380983][T28330] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 448.508032][T28363] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 11:48:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="980000000107010300000000161b000000000002140002"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 448.558157][T28333] bond24 (unregistering): Released all slaves [ 448.622134][T28392] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. 11:48:01 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 11:48:01 executing program 3: socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000001e40)={0x3}, 0x0, &(0x7f0000001ec0)={0x9}, 0x0, &(0x7f0000001f80)={&(0x7f0000001f40)={[0x80000001]}, 0x8}) 11:48:01 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x2, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001f40)={[0x80000001]}, 0x8}) 11:48:01 executing program 4: syz_mount_image$zonefs(&(0x7f00000001c0)='zonefs\x00', 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000f80)='hfsplus\x00', 0x0, 0x0, 0x0, &(0x7f00000023c0), 0x0, &(0x7f0000002480)) 11:48:01 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) [ 448.875581][T28426] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 448.931707][T28426] bond24 (unregistering): Released all slaves 11:48:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x98}}, 0x0) 11:48:02 executing program 3: io_setup(0x7, &(0x7f0000000040)=0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r0, 0x2, &(0x7f0000001480)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0]) 11:48:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x14, 0x12, 0x8, 0x201}, 0x14}}, 0x0) 11:48:02 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:02 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001100)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$CHAR_RAW_ROTATIONAL(r0, 0x127e, 0x0) 11:48:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) 11:48:02 executing program 2: syz_open_dev$sndctrl(&(0x7f00000011c0)='/dev/snd/controlC#\x00', 0xcc, 0x0) [ 449.384478][T28505] bond24 (unregistering): Released all slaves 11:48:02 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 11:48:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x34, 0x12, 0x0, 0x201, 0x70bd28, 0x25dfdbff, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}]}, 0x34}}, 0x0) 11:48:02 executing program 4: pselect6(0x40, &(0x7f0000001e40)={0x3}, 0x0, 0x0, &(0x7f0000001f00)={0x77359400}, &(0x7f0000001f80)={&(0x7f0000001f40)={[0x80000001]}, 0x8}) 11:48:02 executing program 2: socket(0x28, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001fc0)='ns/ipc\x00') 11:48:02 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="980000000107010300000000161b0000000000021400024000000000000000080c0006400000000047a5"], 0x98}}, 0x4000844) 11:48:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa078b25db4cb904e473730e55cff26d1b0e001d005b0000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) 11:48:02 executing program 3: ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 11:48:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, r1}}, 0x18) 11:48:02 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$CHAR_RAW_ROTATIONAL(r0, 0x127e, 0x0) [ 449.846243][T28626] bond24 (unregistering): Released all slaves [ 449.860345][T28627] validate_nla: 6 callbacks suppressed [ 449.860360][T28627] netlink: 'syz-executor.4': attribute type 29 has an invalid length. 11:48:02 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x80801) 11:48:02 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 449.948360][T28627] netlink: 'syz-executor.4': attribute type 29 has an invalid length. 11:48:03 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(0xffffffffffffffff) 11:48:03 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ashmem\x00', 0x0, 0x0) 11:48:03 executing program 4: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000099c0)='l2tp\x00') 11:48:03 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000005c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) sendmsg$AUDIT_TRIM(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000b40)='gtp\x00') 11:48:03 executing program 0: syz_genetlink_get_family_id$gtp(&(0x7f0000000b40)='gtp\x00') [ 450.618526][T28695] block nbd2: NBD_DISCONNECT [ 450.638332][T28697] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 450.644087][T28695] block nbd2: NBD_DISCONNECT 11:48:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0xacf6, 0x7, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 11:48:03 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x0, 0x0) 11:48:03 executing program 4: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000005c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_genetlink_get_family_id$gtp(&(0x7f0000000b40)='gtp\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/dlm-monitor\x00', 0x0, 0x0) 11:48:03 executing program 2: pselect6(0x40, &(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0), &(0x7f0000001400), 0x0) 11:48:03 executing program 3: syz_open_dev$media(&(0x7f0000001180)='/dev/media#\x00', 0x0, 0x0) [ 450.813757][T28727] bond24 (unregistering): Released all slaves [ 450.823400][T28744] block nbd4: NBD_DISCONNECT 11:48:03 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(0xffffffffffffffff) [ 450.880003][T28771] block nbd4: NBD_DISCONNECT 11:48:03 executing program 4: socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000001e40), 0x0, &(0x7f0000001ec0)={0x9}, 0x0, 0x0) 11:48:03 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:04 executing program 3: socket(0xa, 0x5, 0xb4) 11:48:04 executing program 2: recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x80000, 0x0) socketpair(0x0, 0x0, 0x80, 0x0) 11:48:04 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f00000013c0), &(0x7f0000001400), 0x0) 11:48:04 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(0xffffffffffffffff) 11:48:04 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x200, 0x0) [ 451.084855][T28791] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:04 executing program 0: mkdir(0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfsplus(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000001000)}, {0x0}, {0x0, 0x0, 0x8}], 0x80, 0x0) [ 451.233457][T28829] bond24 (unregistering): Released all slaves 11:48:04 executing program 1: socket$kcm(0x2b, 0x1, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r0) 11:48:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 11:48:04 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0}}, 0x0) socketpair(0x2, 0xa, 0x0, &(0x7f0000001cc0)) syz_open_dev$sndctrl(&(0x7f0000001e00)='/dev/snd/controlC#\x00', 0x5, 0x4040) 11:48:04 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) [ 451.559599][T28900] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 451.604124][T28900] __nla_validate_parse: 5 callbacks suppressed [ 451.604139][T28900] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 451.636203][T28900] bond24 (unregistering): Released all slaves 11:48:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 11:48:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x24, 0x0, 0x8, 0x201, 0x0, 0x0, {}, [@typed={0x4, 0xe, 0x0, 0x0, @binary}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="eb"]}, 0x24}}, 0x0) 11:48:04 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x44a00, 0x0) 11:48:04 executing program 3: syz_mount_image$zonefs(0x0, 0x0, 0x0, 0x0, &(0x7f0000005a80), 0x0, 0x0) 11:48:04 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:04 executing program 1: socket$kcm(0x2b, 0x1, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r0) 11:48:04 executing program 4: getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) [ 451.892530][T28977] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:48:04 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x141081, 0x0) [ 451.961990][T28984] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:05 executing program 2: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x100, 0x0, 0x4, 0x100, 0xad2, {r0, r1/1000+10000}, {0x2, 0xc, 0x6, 0xfb, 0x1f, 0x8, "6794ff15"}, 0x10000, 0x2, @planes=&(0x7f0000000040)={0x0, 0x400, @fd}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x28, 0x80000, 0x7) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x20, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x40) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f00000015c0)={0x9, 0x4, [0x4]}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000001c80)=0x80000001, 0x4) socketpair(0x2, 0xa, 0x80, &(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x38, 0x1, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x4c000) 11:48:05 executing program 4: creat(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x101042, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet6(0xa, 0x5, 0x0) close(r2) open(&(0x7f0000000200)='./bus\x00', 0x14d082, 0x0) sendfile(r2, r0, 0x0, 0x80001d00c0d0) [ 452.051997][T29014] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 452.100412][T28984] bond24 (unregistering): Released all slaves 11:48:05 executing program 3: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x100, 0x0, 0x4, 0x100, 0xad2, {r0, r1/1000+10000}, {0x2, 0xc, 0x6, 0xfb, 0x1f, 0x8, "6794ff15"}, 0x10000, 0x2, @planes=&(0x7f0000000040)={0x0, 0x400, @fd=0xffffffffffffffff, 0x4}, 0x5, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000100)) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000300)=""/4096, 0x1000, 0x2, &(0x7f0000001300)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) pselect6(0x40, &(0x7f0000001340)={0x4, 0x4, 0x8000, 0x2, 0x4, 0x4, 0x6, 0x3f}, &(0x7f0000001380)={0x10001, 0x7, 0x8, 0x4573, 0x9, 0x7, 0x101, 0xffff}, &(0x7f00000013c0)={0x10000, 0x1, 0xbc0, 0x9, 0xcf, 0xffffffff, 0x401, 0x3}, &(0x7f0000001400), &(0x7f0000001480)={&(0x7f0000001440)={[0x4cc]}, 0x8}) r4 = socket(0x28, 0x80000, 0x7) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x20, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x40) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f00000015c0)={0x9, 0x8, [0x4, 0x7]}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000016c0)={'ip6tnl0\x00', &(0x7f0000001640)={'sit0\x00', 0x0, 0x2f, 0x0, 0x7f, 0x4, 0x3a, @remote, @private2, 0x20, 0x10, 0x5}}) sendmsg$nl_route(r5, &(0x7f0000001800)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)=@ipv4_newaddr={0x88, 0x14, 0x100, 0x70bd26, 0x25dfdbff, {0x2, 0x20, 0x2, 0xfe, r6}, [@IFA_CACHEINFO={0x14, 0x6, {0x81, 0x400, 0x100000, 0x400}}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_LABEL={0x14, 0x3, 'caif0\x00'}, @IFA_LOCAL={0x8, 0x2, @empty}, @IFA_CACHEINFO={0x14, 0x6, {0x7f, 0xff, 0x1, 0x9}}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3a}}, @IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x74d, 0x7, 0x80000000}}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40884) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x54, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10c, 0xe, 0xb, 0x101, 0x70bd2a, 0x25dfdbfd, {0x5, 0x0, 0x5}, [@typed={0x8, 0x7e, 0x0, 0x0, @u32=0x38}, @nested={0x86, 0x21, 0x0, 0x1, [@generic="0f3b993547e708d1f246e11af5dfe84dae34469057cd16da8610e1e809c157f1fd41a922f99efe1f6ed01192e98c2ac0dfb4a2db32926f0e043b122beaeacde0daed1b5abe4948af23ada158a1ff12fbc33f9dfdcf5b7f1d69a930ef1c09e2cb3ce96a22737760fb934015445836adab9b31229af4388b683553995ff49a2bc8eae0"]}, @generic="a180ca827f2e40dbfe8f30312ad89177e565c91e0510d3512c2b9154eb97bae90ffa88007ff23975d9a7e42aa16503a9bc417191152358d1fbe4bfd6effb1bc44b380b238001693580d0c3dfe4d64f1b30d6b3de3d3064be5a620e3106196f651db1594c6115a748"]}, 0x10c}}, 0x20000000) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/capi/capi20ncci\x00', 0x3c5581febb55f9d4, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, &(0x7f0000001c80)=0x80000001, 0x4) socketpair(0x2, 0xa, 0x80, &(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x38, 0x1, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x4c000) syz_open_dev$sndctrl(&(0x7f0000001e00)='/dev/snd/controlC#\x00', 0x5, 0x4040) pselect6(0x40, &(0x7f0000001e40)={0x3, 0x4, 0x100, 0x800, 0x9, 0x7, 0x0, 0x6c79152}, &(0x7f0000001e80)={0xffff, 0x6, 0x8, 0x4, 0x400, 0x4f3, 0xfff, 0x8}, &(0x7f0000001ec0)={0x9, 0x800, 0x8, 0x9, 0x7f, 0x1f, 0x10001, 0x2}, &(0x7f0000001f00)={0x77359400}, &(0x7f0000001f80)={&(0x7f0000001f40)={[0x80000001]}, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000001fc0)='ns/ipc\x00') 11:48:05 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x640, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, [0x0, 0x0, 0x700]}) 11:48:05 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:05 executing program 3: syz_open_dev$char_raw(&(0x7f00000000c0)='/dev/raw/raw#\x00', 0x0, 0xd5bdeeb7e53aebba) 11:48:05 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000025c0)='/dev/dlm-monitor\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="980000000107010300000000161b0000000000021400024000000000000000080c0006400000000047a564e10c0006"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x4000844) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x0, 0x0) 11:48:05 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001e00)='/dev/snd/controlC#\x00', 0x5, 0x0) 11:48:05 executing program 3: r0 = epoll_create(0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)) [ 452.340832][T29073] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 452.427301][T29101] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 452.430808][T29101] bond24 (unregistering): Released all slaves [ 452.476154][ T35] audit: type=1800 audit(1611834485.450:19): pid=29066 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16376 res=0 errno=0 11:48:05 executing program 1: socket$kcm(0x2b, 0x1, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r0) 11:48:05 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:05 executing program 3: rseq(0x0, 0x0, 0xfffffffffffffffe, 0x0) [ 452.477204][ T35] audit: type=1800 audit(1611834485.450:20): pid=29117 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16376 res=0 errno=0 [ 452.581026][T29146] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 452.581047][T29146] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.3'. [ 452.583604][T29147] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 452.583621][T29147] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.3'. [ 452.838951][T29157] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 452.940390][T29182] bond24: (slave bridge109): Enslaving as a backup interface with an up link 11:48:06 executing program 2: dup(0xffffffffffffffff) openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) getpid() 11:48:06 executing program 4: pselect6(0x0, 0x0, &(0x7f0000001e80), 0x0, 0x0, 0x0) 11:48:06 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa078b25db4cb904e473730e55cff26d1b0e001d005a0000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) 11:48:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="11842700900608233e496d5671dc71ff04291b2c1501772502bb867063f70647862a15257781bcf1d1e498104d082833914ee68afc14ac7cb85975751b8c31271948ee303aa2a34be964b8c1b95638607b2e7ec7fda28fea4caada028a39bf259538214e80b9b5c9b58b1cb36a933d64a25324566f7733ea93fc91c98fec268cb1e2148198e2ccf2463d2ae56c61ac436c336b2d421c6b512a600955c6ede3e5820165eabf2dda9e2294300485327a6d28f7913f19d79e5f478626bb6a607c2f5085c68749edc417da6cc4db8c605215575067836f62b0b3e0b49e8c321240c1b1b54babad07a7000c4eb99200b9d016f1554683b7b3323ab37f066b973d584345792feba5b719ec0413d1c37689ce927de538b4ac16687f6595120220e5205f79227e43a8eaa610c8c232bcb811b4a63eab1b87da214700408e830774dcd6318bec9ef28b9171b0492bddb09009a8d26f797713d81548e0c547b8aa7bcd844c2cfa69560deaa6188b576792cccdc09a1f94da4e4c4f05e4d053d6a2fcdb253dce696d6cd85a1aee740c2a84e3d63aa558d3db42531e2303c6e8cfc0b6e31950fcbf3021f708d47c05edcf3fcdd66226d99f1f132d73f698e0820c395f343e0d69042b6b06bf40b45ea6a8f52a32255f3c40d4e9fb93084421a6235116be29125e5afe2d8c418cedb2548db2fcade80c118af8a6be1e650517519721a5920f842662aad37473f2ba60f7ee8466f8dba829c3e17d3e618ef5768b1b0a8991c64f2e592e726bb4636d13fbd04ed71b031e1c1a27fe30325e521a9845ef1abae620cefb216c47a1e3b4db8cb1287006b9fed827fa5a944b8045a3397ba4208c5cb67117393b2f836e4e79196e05ebd7488fa76619ea0521982b9cb76a63bed4f0ffe48ceb4b2bbe4e590dec80eca4740027f855dad06313a2a0188932a2069fc70b8af0e4294a7b51b552ad72ccd5625fd2a971354bad2930eec5f41e0ae271224b8a9160d96965d372c65e4a0adcee1e8bb84406b6a5c5e4d6ed7ff529afdffcdbea58f43e7c39f8aa9845fc92c84aa8bc0eef238d19b2cd3dd0c6d52694c99f2f493b7064076b62d139837eda3d11e43ae52fb771c1585974bcc6e2adb24096fd3d5ac867afb9cfb6ed07cb34e227f00ed5541499d2e7e3b4f3da831a3b9c32de8be0f5b45e8248b5a2811bb452ca6dc7d56d87531347ad316e6e8c6bf887f70f455cdeae8dcfff004b0ed1b8fd63d1d5e55cbdf1541b87821f3c90f7d47e542ec75b132f5285862d3e9fd84f841e4d137e2735d5f23c87108bcaa591a14ab2ab43802ffb176453312420fe0e79af7236850104bc3e925b16fd0a57ee9959ae8ccc13c843365442bb462d86ead8a20c41e064e0ad286f4aa4c69d0046e5012cecf425b0df11c0b458e31804d8ffe98554afc69b475ca03cbe926806b276e19aa47b3e101b95ee2fd32b9f06a3fcf6f078ce694f9ed8fe03425446bcdd0e7c1f4d3e109bbe30020cb81b64bb0cdfd8a0d33e1143c4fbb7fef15d1059e1f20b394f69d482a1da5fd49508808c80c824a843698386b4d3c3885f063aa3c047624f93298040fbc706020d295cf3f363d42f21d327d91d101cc4758c67195a49c3b3002e14cf28a5b8899b7ef08b6713d89c7049ef594361b1d8a0c5838ff30a6a3f1b0f9f947c76d5f1629d3df215975b498bd33ddbc44798a9f76ba0c41e9ad565e44ebf3c333fade1d4306b1042c5e2e855f3e5fdcd64ce7fdf73b09044bec8a2f0cecbb00c6c76c85891478aa4bae6282541cff613f2b461cce115ba0b78c6f50f4593efe5c2ae558f6c0534db14d5b44416b08abe45c6ddf5c749aae8141e427a0a2f42b903ac71caa09e5098cc2c07d79145c7408415d8f937108d6becdbb38a2b3250c0fdf36297375aa3212c9bc8483e8d629c54a79ca55cdda720496753f27fd9e88e203594c1e28514e0d22b9c34c3e1f10253217abed40b09a533fad16c7b9b8e89d7dfd3b27d579bfc813ad2895543ada10f886c7c75010bc70345b727513fa3b7c6aa677a22e037e2bd7731148996f3a8c424075fd12aa8eb9d8f6a8fe7b2eb68934799f5063c58c1816caa4b400bb0914fc7300111c063e5c01910b0b01803a1a348f387542236d82bef6d926ba571ca0e7745e586eddf2334baeafd7b1149502e781ec45299c3f3cd34c3628057def3c012878123224e33828b216022dfebdc6a284e503868a1e4369af819fcfd4124d801386dbb123ce88d54712f6351c77aad6039b2f5ff3d0d1903c74043864fa9f801847ac8446280a31739e0215bce77c08c2477e9079f62225cf179da445e9f220560d995238f17e87dd4ce0f7ebe5f8941d5d130c2d6398e08bb893b5dd8e58701e41e75fd0182d3ebac8920aad7f4777b4e096eb5c5a17e440c0a5b95ca92bbaec63130bbc41d0cbfccb03eb6c1cffc8558bd255c2096a285346dd9600f33554acf62aef19d2776bd5d8a5a9f0a4976022b8ac1400e3f0a7fa227ebc0ad80187939562492154c708739f865a9803512a6213d5026b1febd0a20ce4b3a4d7d90dc5af3f5beaa06b8af1d19556655ac578f9266f5d3b393f24a2d112eee90f749e1f0a6e27ff2469f1cc21d5bcbf355168c62044fd1cc4861544a8175f640ad3c5bb6c81efa331822efb70b57f4110deebe68794211ee4a95c259b4eb519d887b6cfdee178758382f4f63c80b1f0b9f2337dd5a11a5b1fb04c3315ff942cf7f5d7da36c088a65f86529d003c8c9bf74392f9d897b53a422cb3b3f9e09f9936514ac100fecf3c9a573aae041ce3c86cce6dc2884053bc56a510791392bda454aa7dc580a3a7cf71c18dd57bec21c0eb143deb654d8b0fc642bbc7484dc9943c2102169a6aca278f0fd81b1b6b082b355443c8198284e3b01e9fff1c8df1895e9c9593f16438c7f737f2ab56c0f57eadfcd570c5b04b5218fc7d2c0cdca5c7ba5ff428b4fe541d4c8f6fe274d2a3290343f3d6944c918571e350caf2ec3cc9601cd5b71e8f22ff401024c51c592bf476f255b200962e2ed014ce551376235e8d220763f8c9c904570d6b6227c94d62e08b0c9bd3557b96c8ed227685fc54d43e4a05ca5996c4d8e3e5076f394b0c0bc7cdf972f996c45987ffb2d6a138a1772b7ffbeaa66ceddd34839051c61f9d87153f23823f9178b56eb016524ba862cdca9d147b5bda79553ade825d5a1b8ea3acf8c7cad88cd11b68625d367931b9a0296b228fd2c52da32d050d746942fb38dbb3d5e2ad75b7243f7340a8c0d4c7b156e030b6eb154ec6c47c1b6af307ea0e8916e21166572632321f8b4978ecd1f8b4029a6baba4da2dd984d245d1b6dd4a6f2a72acc4d90f480de489826130dd7b2a9ad79938ed6de65c7a56e0515d84302a8a8ee98c20ea32db20b231b9d00e03dd74b804e15c70ce8a6b169ffa79db7e24062b2dd3560502337bb03c8506a25ce77eaa06f9fb54aff0bab9545c32bb9a35a700361f46a3995ef929af7698bf16df9d8965f4d939f5dba6eb238c1089c25617568b29760ecbfef273b8070c3853a652d30da91cb00e0afa1c663589158711984cfe38869974c30e9b51333091cb0f5d72f5ddb0f3bc550b2787ff6fdfe0b90764f8ec319a2674d6e16ca2417b7a2144b5a4ad248fc4b2b8f74ed1957bd4f52f0db0ac4eb8f6dc62c51e16a803bff507359abdbd0ce1ee0fb936a4a060954c1a939b4b197b61311d079ef09e57e60f94fd796c12cf7e62e11bbdc11e04fc79736e42d6d2dcb02e705dc4e8e17addcc0902af4ebbf0a2f57db53cbe99bb0797137c903195de282ed02c37634181936e351f383fb590eb453e539b80c6935185ac40890c1ba70b5e2eb53235f3a983ce4608929d2609354f89fc22f80a0aa9fc0ea9af7f06e46d8b5f5d47dbd2efe1f2d0f4edee09f11b57c257ff5ecfe96ada3c5f37e1d766c5c85490d14f297e1ce65ae34909f04492e7cc955faabb205491a096147d0930ffa70b68055523e360328f26f28ff160cdb8b4785a22110191c9ecfd187267c1a4300e9370a41c73fe224f3a9c54493780b1a4ff96398f0a60f66e48ef4ad7183f71c0c4d6d9d1a57e19a56d9ed426cd4143de82ceb33011988ed079b52ab30300255e066a84959a10676c7b58515ff9bed194c784072af1062734f5d497f2be9b0ea1228f5a981e8d5d78da49da90b040d4e3a93b7f71360b25cf75fca36a4068748e1bc171dd40fa31d6f9c4c926a635f4ea4faf7511146bc5782606966aaab13a30d67cf182751149f678852da30d0f9b6ea5524a1f5ea01e77d7a74ac588ab2251cdbc9f4f8aa2cf367f0ad2178e66fbd7ab447aae12a7bc6cf3925fe99dcdf8ec95cf4576520b781dc12fe6d310978315d2e3d7dbc49c9be2fa40788ebd5fc02c6c7f566a64b7f4af7a96353265dc9e4c74c909b9a385966f4d7312fdcdfa8f5d0632c6db4a19ce696416a04e937d4a994e757eae59c07e5d3228254b35003eba32ed448516e9aa77b5b92c9ce7fff06a8f4f652d27971a46c621a6b2ee3c1adaf60d5cdfb381a4e4ac9ab7d7d72fcb2d6aa7e104255345f1e15dec8299c9c75735a01338d20f72d8b359803becef76d9ca6da029d0a795e6d4a652bf3880efeee074c81774b2971da03eff6d9516ac8a0c34b686aa1afbcb2befc79618a3dbb2bcd53da0075cdba0ddd975fd4e833291005f0fbf7b167922dc85b109e1381431e0fdc50f80b8592edd57f50f9dd950205e1a21cd3026cb30abe6d06dbec6c7cdb76d90c0e85a69aa1522281bcb3f4fc54ee443e76c7d9bf82e313f2dc3e277c699e079a847635780a5b724aca0ede72febba648de12fd14e3a78b29e9df82a19f4ed9c712e5b313c05e6908f6d4601d076afda5cf77eab4ea7c44c9d40f463fe8cde79f18170de9b087b113cfc7d467bd164564c2a8a99e4566d6f9eb1a8d5393700158fe84c109735cfe0ab45d9eb6fe61619d8538512730e015ffac07279973126e9087b209144c8797dd6b65381e616256a9cbf7771222c41618eb82d3539e7750ef0614acb4c901f88f31589d9d6d87c4b2a5361ad44155bf5476f2bc42cd2e758d478a1bcaf27c6c5607f025c8ff75913cb95eb631a690e3e6201204e616a4482a6eae323dadc0a9c22a7de1567ec3f45380bbde304cc76efd4bb0ac9f28475534eb973fc02f3f5dc73a862052f82f6d40c0821012589925ce3f2274ff2a8097b8464b44068c1505b967679bcc6b5d7e7ece9bd1880fc32531fe5d7bac9c5262a709239e477ecf44915a70aa7f984ec1bed047f3ec92a55714403c7c7503a3ac87cec792e072eefa623c56b6b33beb5ae7f5066a952cf6b0b25ab74841e5d2a9b20b1fe0cd83c3aae37eac0dd08d6a65410af956767766f2c6c12d13e87f363052e1e645c2dccd42948be835a9fe1c8892453b73cbcaa7c9222ccece11f86fba52d29d64a609da597e226e5f59e9a8301297c1e9881557a860df15ee14cf4bf70988e2cf90359587bc378adba5aa610db3cc1d6ae5fba9390b4c", 0x5}, {&(0x7f0000000840)='\x00', 0xc9ed}], 0x2, 0x0, 0x0, 0x1a0}, 0x80) 11:48:06 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001800)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)=@ipv4_newaddr={0x18}, 0x18}}, 0x0) [ 453.237485][T29211] IPVS: ftp: loaded support on port[0] = 21 11:48:06 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 11:48:06 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r0) 11:48:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="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", 0x5}, {&(0x7f0000000840)='\x00', 0xc9ed}], 0x2, 0x0, 0x0, 0x1a0}, 0x80) [ 453.808958][T29212] IPVS: ftp: loaded support on port[0] = 21 [ 453.818826][T29244] bond25: (slave bridge110): Enslaving as a backup interface with an up link 11:48:06 executing program 2: dup(0xffffffffffffffff) openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) getpid() 11:48:06 executing program 3: r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="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", 0x5}, {&(0x7f0000000840)='\x00', 0xc9ed}], 0x2, 0x0, 0x0, 0x1a0}, 0x80) close(0xffffffffffffffff) 11:48:06 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) [ 454.083357][T29314] IPVS: ftp: loaded support on port[0] = 21 11:48:07 executing program 4: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000005c0)='/dev/nbd#\x00', 0x0, 0x0) 11:48:07 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r0) 11:48:07 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:48:07 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f000000c040)='l2tp\x00') 11:48:07 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000840)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) 11:48:07 executing program 4: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x100, 0x0, 0x4, 0x100, 0xad2, {r0, r1/1000+10000}, {0x2, 0xc, 0x6, 0xfb, 0x1f, 0x8, "6794ff15"}, 0x10000, 0x2, @planes=&(0x7f0000000040)={0x0, 0x400, @fd}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001300)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) pselect6(0x40, &(0x7f0000001340)={0x4, 0x4, 0x8000, 0x2, 0x4, 0x4, 0x6, 0x3f}, &(0x7f0000001380)={0x10001, 0x7, 0x8, 0x4573, 0x9, 0x7, 0x101, 0xffff}, &(0x7f00000013c0)={0x10000, 0x1, 0xbc0, 0x9, 0xcf, 0xffffffff, 0x401, 0x3}, &(0x7f0000001400), &(0x7f0000001480)={&(0x7f0000001440)={[0x4cc]}, 0x8}) r2 = socket(0x28, 0x80000, 0x7) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x20, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x40) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f00000015c0)={0x9, 0x4, [0x4]}) socketpair(0x2, 0xa, 0x80, &(0x7f0000001cc0)) 11:48:07 executing program 0: socketpair(0x26, 0x0, 0x0, &(0x7f0000000b00)) 11:48:07 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x20000, 0x0) 11:48:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') read$char_raw(r0, 0x0, 0xbe00) [ 454.861332][T29412] bond27: (slave bridge111): Enslaving as a backup interface with an up link 11:48:07 executing program 4: sendto$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:07 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001e00)='/dev/snd/controlC#\x00', 0x0, 0x4040) 11:48:07 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r0) 11:48:07 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x69, 0xfd000007, &(0x7f00000004c0)="b91803b700030503009e40f088a81fff88f7ffff00000f8477fbac141412e0000001c699da153f21fde6e380f60109f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 11:48:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)) 11:48:08 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:48:08 executing program 4: clock_gettime(0x0, &(0x7f0000000000)) pselect6(0x0, 0x0, 0x0, &(0x7f00000013c0), &(0x7f0000001400), 0x0) socket(0x28, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0}}, 0x0) socketpair(0x2, 0xa, 0x80, &(0x7f0000001cc0)) syz_open_dev$sndctrl(&(0x7f0000001e00)='/dev/snd/controlC#\x00', 0x0, 0x4040) pselect6(0x40, &(0x7f0000001e40), &(0x7f0000001e80)={0xffff}, 0x0, &(0x7f0000001f00)={0x77359400}, &(0x7f0000001f80)={0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000001fc0)='ns/ipc\x00') 11:48:08 executing program 0: syz_open_dev$dri(&(0x7f0000001640)='/dev/dri/card#\x00', 0x9, 0x0) mount$9p_tcp(0x0, &(0x7f00000016c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000099c0)='l2tp\x00') sendmsg$sock(r0, &(0x7f0000009fc0)={&(0x7f0000009b00)=@rc={0x1f, @none}, 0x80, 0x0, 0x0, &(0x7f0000009f80)=[@timestamping={{0x14}}, @mark={{0x14}}], 0x30}, 0x0) [ 455.188944][T29454] validate_nla: 5 callbacks suppressed [ 455.188957][T29454] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:08 executing program 2: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x100, 0x0, 0x4, 0x100, 0xad2, {r0, r1/1000+10000}, {0x2, 0xc, 0x6, 0xfb, 0x1f, 0x8, "6794ff15"}, 0x10000, 0x2, @planes=&(0x7f0000000040)={0x0, 0x400, @fd, 0x4}, 0x5, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100)) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000300)=""/4096, 0x1000, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10c, 0xe, 0xb, 0x101, 0x70bd2a, 0x25dfdbfd, {0x5, 0x0, 0x5}, [@typed={0x8, 0x7e, 0x0, 0x0, @u32=0x38}, @nested={0x86, 0x21, 0x0, 0x1, [@generic="0f3b993547e708d1f246e11af5dfe84dae34469057cd16da8610e1e809c157f1fd41a922f99efe1f6ed01192e98c2ac0dfb4a2db32926f0e043b122beaeacde0daed1b5abe4948af23ada158a1ff12fbc33f9dfdcf5b7f1d69a930ef1c09e2cb3ce96a22737760fb934015445836adab9b31229af4388b683553995ff49a2bc8eae0"]}, @generic="a180ca827f2e40dbfe8f30312ad89177e565c91e0510d3512c2b9154eb97bae90ffa88007ff23975d9a7e42aa16503a9bc417191152358d1fbe4bfd6effb1bc44b380b238001693580d0c3dfe4d64f1b30d6b3de3d3064be5a620e3106196f651db1594c6115a748"]}, 0x10c}}, 0x20000000) socketpair(0x2, 0xa, 0x80, &(0x7f0000001cc0)) 11:48:08 executing program 1: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r1) 11:48:08 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 11:48:08 executing program 3: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) geteuid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_mount_image$hfsplus(&(0x7f0000000f80)='hfsplus\x00', 0x0, 0x0, 0x2, &(0x7f00000023c0)=[{&(0x7f0000001000)="ac", 0x1}, {0x0}], 0x0, &(0x7f0000002480)) [ 455.399949][T29458] bond28: (slave bridge112): Enslaving as a backup interface with an up link 11:48:08 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:48:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000080)="0f0147d1d1861900000f23c80f21f8350000e0000f23f8b9190b0000b8ba690000ba000000000f308fe938028d2f000000f30f2cc0b805000000f9e0a264df0f01c166ba4300ecc744240000000000c7442402bc0c0000c7442406000000000f011c24c4c11972d000", 0x69}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11:48:08 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000025c0)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$CHAR_RAW_ROTATIONAL(r0, 0x127e, 0x0) [ 455.560502][T29515] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xe000000, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207a07e4f1e000000880306fb0a000200060ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0) 11:48:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000005c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_genetlink_get_family_id$gtp(&(0x7f0000000b40)='gtp\x00') [ 455.762258][T29529] bond29: (slave bridge113): Enslaving as a backup interface with an up link [ 455.803340][T29564] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 455.825030][T29568] block nbd4: NBD_DISCONNECT [ 455.833955][T29568] block nbd4: NBD_DISCONNECT [ 455.852661][T29571] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. 11:48:08 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32], 0x20}, 0x1, 0x34000}, 0x0) 11:48:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x2}}}, 0x24}}, 0x0) 11:48:08 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x128, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) [ 456.062789][T29581] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 456.202136][T29584] bond30: (slave bridge114): Enslaving as a backup interface with an up link 11:48:09 executing program 2: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x61c703) 11:48:09 executing program 1: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r1) 11:48:09 executing program 0: socketpair(0x2, 0x0, 0x0, &(0x7f0000001cc0)) 11:48:09 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="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", 0x5}, {&(0x7f0000000840)='\x00', 0xc9ed}], 0x2, 0x0, 0x0, 0x1a0}, 0x80) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) sendmsg$sock(0xffffffffffffffff, 0x0, 0x40051) close(0xffffffffffffffff) 11:48:09 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 11:48:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32], 0x20}, 0x1, 0x34000}, 0x0) [ 456.440299][T29637] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:09 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) [ 456.582364][T29640] bond31: (slave bridge115): Enslaving as a backup interface with an up link 11:48:09 executing program 2: socketpair(0x2, 0xa, 0x0, &(0x7f0000001cc0)) 11:48:09 executing program 0: socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000001e40)={0x3}, 0x0, &(0x7f0000001ec0), 0x0, &(0x7f0000001f80)={&(0x7f0000001f40)={[0x80000001]}, 0x8}) 11:48:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32], 0x20}, 0x1, 0x34000}, 0x0) 11:48:09 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000580)) 11:48:10 executing program 1: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r1) 11:48:10 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 11:48:10 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0xacf6, 0x7, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, 0x0, &(0x7f0000000040)=@udp, 0x1}, 0x20) 11:48:10 executing program 0: pselect6(0x40, &(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)={0x10000}, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={[0x4cc]}, 0x8}) [ 457.130131][T29694] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:10 executing program 3: r0 = openat$cuse(0xffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) r1 = openat$cuse(0xffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2}, 0x50) 11:48:10 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 11:48:10 executing program 0: bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) 11:48:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_raw(r0, &(0x7f0000000200)=ANY=[], 0xbe00) [ 457.322914][T29701] bond32: (slave bridge116): Enslaving as a backup interface with an up link 11:48:10 executing program 2: socket(0x28, 0x0, 0x7) 11:48:10 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002580)='/dev/vhost-vsock\x00', 0x2, 0x0) 11:48:10 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:10 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)="05", 0x7e530) [ 457.626982][T29761] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 457.763052][T29768] bond33: (slave bridge117): Enslaving as a backup interface with an up link 11:48:11 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f000000c040)='l2tp\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f000000c140)='/dev/dlm-monitor\x00', 0x6480, 0x0) 11:48:11 executing program 1: socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r0) 11:48:11 executing program 3: clock_gettime(0x0, &(0x7f0000000000)) pselect6(0x0, 0x0, 0x0, &(0x7f00000013c0), &(0x7f0000001400), 0x0) socket(0x0, 0x0, 0x0) socketpair(0x0, 0xa, 0x80, 0x0) syz_open_dev$sndctrl(0x0, 0x5, 0x4040) syz_open_procfs$namespace(0x0, &(0x7f0000001fc0)='ns/ipc\x00') 11:48:11 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x200, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001440)='/proc/capi/capi20ncci\x00', 0x0, 0x0) 11:48:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:11 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)="05", 0x7e530) [ 458.170186][T29810] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:11 executing program 4: syz_mount_image$gfs2meta(&(0x7f0000003340)='gfs2meta\x00', &(0x7f0000003380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004640)) socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f000000ef40)='./file0\x00', &(0x7f000000ef80)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) 11:48:11 executing program 2: syz_open_dev$ndb(&(0x7f00000005c0)='/dev/nbd#\x00', 0x0, 0x77040) 11:48:11 executing program 1: socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r0) [ 458.358362][T29818] bond34: (slave bridge118): Enslaving as a backup interface with an up link 11:48:11 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001e00)='/dev/snd/controlC#\x00', 0x0, 0x0) 11:48:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:11 executing program 2: pselect6(0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400), 0x0) 11:48:11 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x2402, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000300)="bd38832aa0d96fba3d73fad7cd21", 0xe) 11:48:11 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x70, 0x44, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1, @perf_config_ext={0x400}, 0x0, 0x3, 0xfffffff7, 0x2}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) 11:48:11 executing program 2: syz_open_dev$ndb(&(0x7f00000005c0)='/dev/nbd#\x00', 0x0, 0xc082) 11:48:11 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) [ 458.728232][T29877] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 458.928718][T29897] bond35: (slave bridge119): Enslaving as a backup interface with an up link 11:48:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x1c, 0x0, 0x8, 0x201, 0x0, 0x0, {}, [@typed={0x4, 0xe, 0x0, 0x0, @binary}, @generic="eb"]}, 0x1c}}, 0x0) 11:48:12 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)="05", 0x7e530) 11:48:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x14, 0x0, 0x0, 0x201}, 0x14}}, 0x0) 11:48:12 executing program 3: clock_gettime(0x0, &(0x7f0000000000)) pselect6(0x0, 0x0, 0x0, &(0x7f00000013c0), 0x0, 0x0) socketpair(0x2, 0xa, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001fc0)='ns/ipc\x00') 11:48:12 executing program 1: socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r0) 11:48:12 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) [ 459.119055][T29926] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:48:12 executing program 4: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair(0x26, 0x5, 0x0, &(0x7f0000000b00)) 11:48:12 executing program 2: syz_open_dev$ndb(&(0x7f00000005c0)='/dev/nbd#\x00', 0x0, 0x2044) [ 459.215991][T29932] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 459.482945][T29937] bond36: (slave bridge120): Enslaving as a backup interface with an up link 11:48:12 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:48:12 executing program 4: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000840)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) socketpair(0x26, 0x5, 0x4, &(0x7f0000000b00)) 11:48:12 executing program 2: clock_gettime(0x0, &(0x7f0000000000)) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), &(0x7f0000001480)={0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000001e00)='/dev/snd/controlC#\x00', 0x0, 0x4040) syz_open_procfs$namespace(0x0, &(0x7f0000001fc0)='ns/ipc\x00') 11:48:12 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/829], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="fbef640800000049995ca200f000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 11:48:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x50, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x50}}, 0x0) [ 459.721066][T29992] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 459.885360][T30008] bond37: (slave bridge121): Enslaving as a backup interface with an up link 11:48:13 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)="05", 0x7e530) 11:48:13 executing program 2: clock_gettime(0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000001e00)='/dev/snd/controlC#\x00', 0x0, 0x4040) pselect6(0x40, &(0x7f0000001e40), &(0x7f0000001e80)={0xffff}, 0x0, 0x0, &(0x7f0000001f80)={0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000001fc0)='ns/ipc\x00') 11:48:13 executing program 4: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001440)='/proc/capi/capi20ncci\x00', 0x0, 0x0) 11:48:13 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r1) 11:48:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9], 0x20}, 0x1, 0x34000}, 0x0) 11:48:13 executing program 3: pselect6(0x40, &(0x7f0000001340), &(0x7f0000001380), 0x0, &(0x7f0000001400), 0x0) 11:48:13 executing program 2: add_key$fscrypt_v1(&(0x7f0000000240)='logon\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x0) [ 460.255630][T30051] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:13 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) 11:48:13 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) [ 460.547443][T30056] bond38: (slave bridge122): Enslaving as a backup interface with an up link 11:48:13 executing program 2: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x80800) 11:48:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, 0x0, 0x0) 11:48:13 executing program 4: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) [ 460.817312][T30108] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 460.936270][T30108] bond39: (slave bridge123): Enslaving as a backup interface with an up link 11:48:14 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(r0, &(0x7f0000000000)="05", 0x7e530) 11:48:14 executing program 3: syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000005c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) sendmsg$AUDIT_TRIM(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000b40)='gtp\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/dlm-monitor\x00', 0x0, 0x0) 11:48:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 11:48:14 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r1) 11:48:14 executing program 4: r0 = eventfd(0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 11:48:14 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, 0x0, 0x0) 11:48:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x98}}, 0x0) [ 461.185238][T30153] block nbd3: NBD_DISCONNECT [ 461.233734][T30159] block nbd3: NBD_DISCONNECT [ 461.242869][T30160] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 461.302597][T30160] bond40: (slave bridge124): Enslaving as a backup interface with an up link 11:48:14 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r1) 11:48:14 executing program 4: ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={'lo\x00', 0xde0}) getpeername(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000200)=0x80) setxattr$trusted_overlay_opaque(&(0x7f0000001580)='./file0\x00', 0x0, &(0x7f0000001600)='y\x00', 0x2, 0x4) syz_mount_image$gfs2meta(&(0x7f0000003340)='gfs2meta\x00', &(0x7f0000003380)='./file0\x00', 0xe3, 0x3, &(0x7f00000045c0)=[{0x0}, {0x0}, {&(0x7f0000004540)="42fb33149a57b3cf66d7860c18406ec09f2006edf7b51c16c7b50af7edb6cc108161908f887581046ef45f4c26d7", 0x2e, 0x4}], 0x0, &(0x7f0000004640)={[{}, {'{!)'}, {':([-'}, {}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@obj_role={'obj_role', 0x3d, ')--))!'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f000000d640)='./file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f000000ee40)='./file0\x00', &(0x7f000000ee80)='overlay\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f000000ef40)='./file0\x00', &(0x7f000000ef80)='trusted.overlay.opaque\x00', &(0x7f000000efc0)='y\x00', 0x2, 0x0) 11:48:14 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, 0x0, 0x0) 11:48:14 executing program 3: syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0xc00) [ 461.598728][T30211] gfs2meta: Unknown parameter '{!)' 11:48:14 executing program 2: pselect6(0x40, &(0x7f0000001e40), 0x0, 0x0, &(0x7f0000001f00)={0x77359400}, &(0x7f0000001f80)={&(0x7f0000001f40)={[0x80000001]}, 0x8}) [ 461.620919][T30213] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 461.668186][T30211] overlayfs: missing 'lowerdir' [ 461.697709][T30211] gfs2meta: Unknown parameter '{!)' [ 461.706431][T30222] overlayfs: missing 'lowerdir' [ 461.902473][T30219] bond41: (slave bridge125): Enslaving as a backup interface with an up link 11:48:15 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) write(r0, &(0x7f0000000000)="05", 0x7e530) 11:48:15 executing program 3: ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) 11:48:15 executing program 4: socket(0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000001cc0)) 11:48:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x34000}, 0x0) [ 462.064134][T30270] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:15 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) write(r0, &(0x7f0000000000)="05", 0x7e530) 11:48:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001800)={&(0x7f0000001600), 0xc, 0x0}, 0x0) syz_open_dev$sndctrl(&(0x7f0000001e00)='/dev/snd/controlC#\x00', 0x0, 0x4040) pselect6(0x40, &(0x7f0000001e40)={0x3}, 0x0, &(0x7f0000001ec0)={0x9}, &(0x7f0000001f00)={0x77359400}, 0x0) 11:48:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x34000}, 0x0) [ 462.227914][T30298] bond42: (slave bridge126): Enslaving as a backup interface with an up link 11:48:15 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x0, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r1) 11:48:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, 0x0) 11:48:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0}}, 0x0) 11:48:15 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) write(r0, &(0x7f0000000000)="05", 0x7e530) [ 462.353928][T30323] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 462.535799][T30327] bond43: (slave bridge127): Enslaving as a backup interface with an up link 11:48:15 executing program 2: syz_open_dev$ndb(&(0x7f00000005c0)='/dev/nbd#\x00', 0x0, 0x8c0) 11:48:15 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000000)="05", 0x7e530) 11:48:15 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0), 0x4) listen(r0, 0x0) 11:48:15 executing program 4: clock_gettime(0x35fcce230000000b, 0x0) 11:48:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x34000}, 0x0) 11:48:15 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x0, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r1) 11:48:15 executing program 2: socketpair(0x2, 0xa, 0x80, &(0x7f0000001cc0)) 11:48:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="98"], 0x98}}, 0x0) [ 462.865155][T30391] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:15 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000000)="05", 0x7e530) 11:48:15 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x0, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r1) 11:48:15 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), &(0x7f0000001480)={&(0x7f0000001440), 0x8}) [ 463.042290][T30396] bond44: (slave bridge128): Enslaving as a backup interface with an up link 11:48:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1419"], 0x14}}, 0x0) 11:48:16 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x2, 0x0, "ae1f346839790548ce70a143caf3d267471d2d2d65ffef801e01d910fa429daf"}) 11:48:16 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000000)="05", 0x7e530) 11:48:16 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}, 0x1, 0x34000}, 0x0) 11:48:16 executing program 3: modify_ldt$write2(0x11, &(0x7f0000000000)={0x7ff}, 0x10) 11:48:16 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r1) 11:48:16 executing program 2: socketpair(0x28, 0x801, 0x0, &(0x7f0000000000)) 11:48:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 11:48:16 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(r0, &(0x7f0000000000)="05", 0x7e530) [ 463.359104][T30463] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000040)='h', 0x33fe0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x20008040, 0x0, 0x0) 11:48:16 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(r0, &(0x7f0000000000)="05", 0x7e530) 11:48:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) 11:48:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x2800) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000240)) [ 463.531588][T30474] bond45: (slave bridge129): Enslaving as a backup interface with an up link 11:48:16 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r1) 11:48:16 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}, 0x1, 0x34000}, 0x0) 11:48:16 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(r0, &(0x7f0000000000)="05", 0x7e530) 11:48:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000040)='h', 0x33fe0, 0x0, 0x0, 0x0) 11:48:16 executing program 3: r0 = epoll_create1(0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10040, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 11:48:16 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r1) 11:48:16 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x0) 11:48:16 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) write(r0, &(0x7f0000000000)="05", 0x7e530) [ 463.776778][T30528] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) close(r2) 11:48:16 executing program 2: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$llc(r0, &(0x7f0000000380)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) [ 463.919768][T30535] bond46: (slave bridge130): Enslaving as a backup interface with an up link 11:48:17 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000d80)) 11:48:17 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) [ 464.007538][T30581] tipc: Can't bind to reserved service type 0 11:48:17 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, 0x0, 0x2) close(r1) 11:48:17 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}, 0x1, 0x34000}, 0x0) 11:48:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 11:48:17 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) write(r0, &(0x7f0000000000)="05", 0x7e530) 11:48:17 executing program 3: accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x1000) 11:48:17 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, 0x0, 0x2) close(r1) 11:48:17 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000480)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default}) 11:48:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x16d, &(0x7f0000000340)="5cf24bb9900c8658ab8dcf26b76af2f3c921bf3cb1d8c1fc07fe0dc8800cb5424458e2f1c9c0d88f2140f489da6844d807b530b2b880323aa72ed8af2548273236549d12f710f8fec78ce6ff46a237feac24846962135863f013e48f5d03af0ca5d4da0a43b0237c68eba79ae5860cd649a12a4ab5382d66a6410debc9010ea6c3ab53539c281d054c0218f288598ef342f9908357989f3209cd922d31a1b283f5f5168ef2b167c2c336c3acce26d228512a7ca5a75c9dd1770b5f4a5012f3e28fd83b49bb3f7e50c1e4ac8da2dccc53af9953c878bc0a32cef4f3a37dbabef10ffc8c8c8d016e01413189858fed0a4571d321bd3a53a7b401b0a16bcaf6b594ca7205d0b6bca320a4e13a383272f00a3c289e6dc8c62e8ea26ce7cad1667f23b48da3ff09dbef3a4076f7c627a76d27eeeadb7bc1bea9092b4d706f0d797d6a132bf4f3cbd45e99033c047e9c0e0bece5159cc87890588d66ae2ec11adc724ddba5cec4eabfbb20b1b15fea41"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 464.255381][T30599] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:17 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) write(r0, &(0x7f0000000000)="05", 0x7e530) 11:48:17 executing program 3: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) read$alg(r0, &(0x7f0000000000)=""/77, 0x4d) 11:48:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 464.453876][T30607] bond47: (slave bridge131): Enslaving as a backup interface with an up link 11:48:17 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(r0, &(0x7f0000000000)="05", 0x7e530) 11:48:17 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, 0x0, 0x2) close(r1) 11:48:17 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000"], 0x20}, 0x1, 0x34000}, 0x0) 11:48:17 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') read$char_raw(r0, &(0x7f0000000180)=ANY=[], 0xbe00) 11:48:17 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(r0, &(0x7f0000000000)="05", 0x7e530) 11:48:17 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(r0, &(0x7f0000000000)="05", 0x7e530) 11:48:17 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) write(r0, &(0x7f0000000000)="05", 0x7e530) 11:48:17 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) close(r1) [ 464.798661][T30665] bond48: (slave bridge132): Enslaving as a backup interface with an up link 11:48:20 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) bind$pptp(r0, 0x0, 0x0) 11:48:20 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') read$char_raw(r0, &(0x7f0000000180)=ANY=[], 0xbe00) 11:48:20 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000"], 0x20}, 0x1, 0x34000}, 0x0) 11:48:20 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) close(r1) 11:48:20 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) 11:48:20 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) write(r0, &(0x7f0000000000)="05", 0x7e530) [ 467.410383][T30734] validate_nla: 1 callbacks suppressed [ 467.410398][T30734] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00'}) 11:48:20 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') read$char_raw(r0, &(0x7f0000000180)=ANY=[], 0xbe00) 11:48:20 executing program 2: socket$bt_rfcomm(0x1f, 0x0, 0x3) 11:48:20 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') read$char_raw(r0, &(0x7f0000000180)=ANY=[], 0xbe00) [ 467.562820][T30741] bond49: (slave bridge133): Enslaving as a backup interface with an up link 11:48:20 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) 11:48:20 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000"], 0x20}, 0x1, 0x34000}, 0x0) 11:48:20 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3}}) 11:48:20 executing program 3: syz_mount_image$udf(&(0x7f0000012440)='udf\x00', &(0x7f0000012480)='./file0\x00', 0x0, 0x0, &(0x7f0000012840), 0x0, &(0x7f0000012900)={[{@session={'session'}}]}) 11:48:20 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f00000024c0)={[{@barrier='barrier'}]}) [ 467.729635][T30794] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 467.821151][T30816] hfsplus: unable to find HFS+ superblock [ 467.837751][T30802] bond50: (slave bridge134): Enslaving as a backup interface with an up link [ 467.911629][T30814] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 467.922354][T30816] hfsplus: unable to find HFS+ superblock [ 467.941954][T30814] UDF-fs: Scanning with blocksize 512 failed [ 467.968033][T30814] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 467.975591][T30814] UDF-fs: Scanning with blocksize 1024 failed [ 467.982087][T30814] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 467.990567][T30814] UDF-fs: Scanning with blocksize 2048 failed [ 467.998621][T30814] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 468.015813][T30814] UDF-fs: Scanning with blocksize 4096 failed 11:48:21 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) close(r1) 11:48:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x321, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 11:48:21 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32], 0x20}, 0x1, 0x34000}, 0x0) 11:48:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006800)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000017880)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000004f00)=ANY=[], 0x20}], 0x1, 0x0) 11:48:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xc0}}, 0x0) 11:48:21 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) write(r0, &(0x7f0000000000)="05", 0x7e530) [ 468.328481][T30860] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:21 executing program 2: socketpair(0x2, 0x1, 0x0, &(0x7f0000000040)) 11:48:21 executing program 4: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f0000000180)='1000000\x00', 0x8) 11:48:21 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(0xffffffffffffffff) 11:48:21 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000300)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/167, 0xa7}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) [ 468.472371][T30860] bond51: (slave bridge135): Enslaving as a backup interface with an up link [ 468.517044][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.536114][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 11:48:21 executing program 2: socketpair(0x15, 0x0, 0x0, &(0x7f0000004380)) [ 468.566119][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.582762][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.605320][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 11:48:21 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32], 0x20}, 0x1, 0x34000}, 0x0) 11:48:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x65, &(0x7f0000000540)=[@in={0x2, 0x0, @local}], 0x10) [ 468.646272][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 11:48:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={0x0}, 0x1, 0x0, 0x60}, 0x0) [ 468.692618][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.718711][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.740860][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.755001][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.762558][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.784090][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.815723][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.838572][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.862542][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.884213][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.892581][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.908514][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.922081][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.937487][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.948355][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.961378][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.971876][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.985683][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.993116][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.001460][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.009446][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.017547][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.025328][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.032754][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.040586][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.048426][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.057073][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.064936][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.072470][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.080357][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.088575][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.096421][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.104154][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.111551][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.119346][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.133592][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.141011][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.148822][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.159070][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.172192][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.182944][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.198916][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.208095][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 11:48:22 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) write(r0, &(0x7f0000000000)="05", 0x7e530) [ 469.222295][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.240230][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.249304][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.264953][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.279818][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.289221][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.298163][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.308603][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.328439][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.349029][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.352454][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.367420][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.382697][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.388010][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.400159][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.411884][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.423018][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.423827][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.446531][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.453363][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.459164][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.464232][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 11:48:22 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(0xffffffffffffffff) [ 469.473579][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.493178][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.501096][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.513859][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.516805][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.521459][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.521480][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.532817][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.567086][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.580804][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.590605][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.591503][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.605770][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.613174][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.621197][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.626206][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.636213][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.643927][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.647176][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.651314][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.651334][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.674940][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.679668][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.682338][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.682359][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.705306][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.712828][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.723577][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.728259][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.730977][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.730996][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.741252][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.769001][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.773520][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.779321][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.793518][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.800928][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.803533][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.823317][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.823634][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.830939][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.853634][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.853947][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.861043][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.861063][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.877539][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.898350][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.908631][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.913633][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.920916][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.933614][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.933682][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.941030][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.959107][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.973204][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.981103][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.983569][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 469.996011][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.996036][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.996055][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.996074][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.996092][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.996109][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.996127][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.996144][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.010632][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.025347][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.035914][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.053863][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.063034][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.063965][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.070910][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.093462][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.101844][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.124248][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.131873][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.139467][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.139676][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.147382][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.163063][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.170785][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.178652][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.180599][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.186673][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.186695][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.186714][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.186732][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.186750][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.186768][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.186786][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.186805][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.186823][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.186841][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.186859][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.186877][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.186896][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.186914][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.186931][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.186950][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.186967][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.186984][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.187003][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.187021][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.187039][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.187057][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.187075][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.187093][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.187111][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.187129][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.233552][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.246411][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.246435][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.246454][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.246472][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.246490][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.246509][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.246527][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.246544][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.246562][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.280305][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.284646][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.293111][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.306140][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.340876][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.344498][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.351667][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.366064][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.383580][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.397060][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.398181][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.450311][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.457880][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.474323][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.486782][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.502028][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.510446][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.548478][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.559867][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.573436][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.578015][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.581105][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.603942][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.618140][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.649115][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.649577][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.656898][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.672180][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.680049][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.687901][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.692226][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.696068][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.696091][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.696110][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.696142][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.696167][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.696185][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.696203][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.696221][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.696240][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.696258][ T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 470.702098][ T19] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 470.750499][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.821944][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.835122][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.842549][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.851642][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.860214][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.868191][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.876337][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.884315][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.891718][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.901603][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.909948][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.918137][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.926875][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.934703][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.942293][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.950205][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.958195][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.966054][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.973887][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.981414][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.989409][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 470.997287][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.007893][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.015787][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.024198][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.031940][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.039863][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.048006][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.056206][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.064194][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.071709][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.079620][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.087539][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.095427][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.105456][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.113062][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.121827][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.129829][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.137699][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.145741][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.154025][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.161675][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.169671][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.177682][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.185961][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.193826][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.201351][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.210974][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.226757][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.239306][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.251731][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.268195][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.278826][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.292500][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.303061][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.321345][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.330007][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.346886][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.358926][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.370888][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.383158][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.398031][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.408635][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.423740][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.431288][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.439291][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.447358][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.455233][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.462753][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.470869][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.478795][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.486736][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.494611][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.502119][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.510012][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.519070][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.526923][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.534860][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.542874][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.551787][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.559734][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.567592][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.575482][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.582991][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.590880][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.598786][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.606806][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.624413][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.639825][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.648208][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.656195][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.664026][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.671527][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.679535][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.687395][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.695238][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.702823][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.711115][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.720825][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.728753][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.737230][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.745091][T12103] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 471.771448][T12103] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 [ 471.863026][T30946] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:24 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) listen(r1, 0x1f) 11:48:25 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32], 0x20}, 0x1, 0x34000}, 0x0) 11:48:25 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 11:48:25 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x6200, 0x0) 11:48:25 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) write(r0, &(0x7f0000000000)="05", 0x7e530) 11:48:25 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) listen(r1, 0x1f) 11:48:25 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) write(r0, &(0x7f0000000000)="05", 0x7e530) [ 472.252752][T31001] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006800)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000006880)=@abs, 0x6e) 11:48:25 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$llc(r0, &(0x7f0000000000)=""/87, 0x57, 0x40, 0x0, 0x0) 11:48:25 executing program 2: r0 = socket(0x1, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x100}, 0x0) 11:48:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8914, &(0x7f0000000080)={'gre0\x00', 0x0}) [ 472.429895][T31008] bond53: (slave bridge136): Enslaving as a backup interface with an up link 11:48:25 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(0xffffffffffffffff) 11:48:25 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) listen(r1, 0x1f) 11:48:25 executing program 4: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:25 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000000)="05", 0x7e530) 11:48:25 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 11:48:25 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) listen(r1, 0x1f) 11:48:25 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000000)="05", 0x7e530) [ 472.825897][T31068] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x701}, 0x14}}, 0x0) 11:48:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001500)={0x44, 0x0, &(0x7f0000001380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000014c0)='Y'}) [ 473.040509][T31066] bond54: (slave bridge137): Enslaving as a backup interface with an up link 11:48:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={0x0}, 0x1, 0x0, 0xc0000000}, 0x0) 11:48:26 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000000)="05", 0x7e530) 11:48:26 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:26 executing program 3: r0 = socket(0x2, 0x5, 0x0) sendto$l2tp(r0, &(0x7f0000000000)="dd", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) 11:48:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={0x0, 0x34}}, 0x0) 11:48:26 executing program 2: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000800)={'ip6_vti0\x00', 0x0}) 11:48:26 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(r0, 0x0, 0x0) 11:48:26 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000080)) 11:48:26 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x3, 0x2) 11:48:26 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(r0, 0x0, 0x0) [ 473.646496][T31138] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:26 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x4800, 0x0) 11:48:26 executing program 1: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r0, &(0x7f0000000000)=""/77, 0x4d) sendmmsg$alg(r1, &(0x7f00000052c0)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="12f31cb5edf452a74f543d10eab30677f327e27b28fc8d2f1438bbe327fa25363dd31886c42acb71045e37df25d4b8fe27324c85bb65047df955d9e6a9e85c6739a542c0736c965fefbc03d8169b", 0x4e}], 0x1}], 0x1, 0x0) 11:48:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x4}, 0x0) [ 473.845823][T31144] bond55: (slave bridge138): Enslaving as a backup interface with an up link 11:48:26 executing program 2: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 11:48:27 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:27 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(r0, 0x0, 0x0) 11:48:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8981, &(0x7f0000000080)={'syztnl1\x00', 0x0}) 11:48:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x11, &(0x7f0000000300)={@remote}, 0x20) 11:48:27 executing program 1: socketpair(0x2, 0x3, 0x5, &(0x7f0000000080)) 11:48:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x0) 11:48:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0, 0x700}}], 0x1, 0x0, 0x0) 11:48:27 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(r0, &(0x7f0000000000), 0x0) [ 474.139156][T31208] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:27 executing program 4: socketpair(0xa, 0x0, 0x174, &(0x7f0000000040)) 11:48:27 executing program 1: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000001680)=""/60) 11:48:27 executing program 4: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpeername$llc(r0, 0x0, &(0x7f00000001c0)) [ 474.349885][T31210] bond56: (slave bridge139): Enslaving as a backup interface with an up link 11:48:27 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) 11:48:27 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:27 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(r0, &(0x7f0000000000), 0x0) 11:48:27 executing program 1: socket(0x22, 0x0, 0x1f) 11:48:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') read$char_raw(r0, &(0x7f0000000200)=ANY=[], 0xbe00) 11:48:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000003640)={0x0, 0x0, 0x0}, 0x143) 11:48:27 executing program 3: r0 = socket(0x2, 0x5, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 11:48:27 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write(r0, &(0x7f0000000000), 0x0) [ 474.612031][T31271] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:27 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x0) 11:48:27 executing program 2: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000400)=""/85) 11:48:27 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0) [ 474.831200][T31277] bond57: (slave bridge140): Enslaving as a backup interface with an up link 11:48:27 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/cachefiles\x00', 0x6000, 0x0) 11:48:27 executing program 3: socket$nl_rdma(0x10, 0x3, 0x14) socketpair(0x0, 0x0, 0x0, &(0x7f00000005c0)) 11:48:27 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @mcast1, 0xfffffffe}, 0x1c, 0x0}}], 0x2, 0x0) 11:48:27 executing program 2: clock_adjtime(0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x35ad, 0x0, 0x0, 0x2}) 11:48:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_raw(r0, 0x0, 0xbe00) 11:48:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x6b, &(0x7f0000000540)=[@in={0x2, 0x0, @local}], 0x10) 11:48:28 executing program 3: pselect6(0x40, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={0x7}, &(0x7f0000000400)={0x0, 0x989680}, 0x0) 11:48:28 executing program 1: r0 = socket(0x2, 0xa, 0x0) connect$bt_rfcomm(r0, 0x0, 0x0) [ 475.114057][T31339] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:28 executing program 4: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/vcsu\x00', 0x400, 0x0) 11:48:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x40001) [ 475.209288][T31339] bond58: (slave bridge141): Enslaving as a backup interface with an up link 11:48:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000014c0)='Y'}) 11:48:28 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:28 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0x0, @output}) 11:48:28 executing program 2: socket(0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0) accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@remote, @netrom, @null, @rose, @netrom, @netrom, @default, @rose]}, &(0x7f0000000140)=0x48, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) [ 475.405801][T31392] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:28 executing program 4: r0 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='}', 0x1, 0xfffffffffffffffb) keyctl$invalidate(0x15, r0) 11:48:28 executing program 1: setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000), 0x4) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000003600)) 11:48:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 11:48:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000040)='h', 0x33fe0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:28 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f00000002c0)={0x1e, 0x321, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) 11:48:28 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$llc(r1, &(0x7f0000000040)=""/7, 0x7, 0x0, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000180)='J', 0x1}], 0x1}, 0x0) 11:48:28 executing program 4: syz_mount_image$adfs(&(0x7f00000027c0)='adfs\x00', &(0x7f0000002800)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000003cc0)) [ 475.560578][T31438] syz-executor.1 uses old SIOCAX25GETINFO [ 475.585288][T31406] bond59: (slave bridge142): Enslaving as a backup interface with an up link 11:48:28 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000110025040000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:28 executing program 3: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$alg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000180)='J', 0x1}], 0x1}, 0x0) recvfrom$llc(r1, &(0x7f0000000000)=""/14, 0xe, 0x2022, 0x0, 0x0) 11:48:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002019200020002000200020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f45000000000000000000000000000000000000000004000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f00000002c0)=ANY=[]) 11:48:28 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) [ 475.783884][T31457] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:28 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x10f, 0x13, 0x0, 0x0) 11:48:28 executing program 1: futex(0x0, 0x8c, 0x1, 0x0, &(0x7f00000053c0), 0x0) 11:48:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x321, 0x0, 0x0, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x24}}, 0x0) 11:48:28 executing program 3: syz_mount_image$adfs(&(0x7f0000000200)='adfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000900)) [ 475.950794][T31497] loop4: detected capacity change from 136 to 0 [ 475.969597][T31497] isofs_fill_super: root inode is not a directory. Corrupted media? [ 475.989050][T31463] bond60: (slave bridge143): Enslaving as a backup interface with an up link 11:48:29 executing program 0: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x0) 11:48:29 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000280)="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", 0x5fa}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) socketpair(0x0, 0x80005, 0x0, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x104, 0x7}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="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", 0x5}, {&(0x7f0000000840)='\x00', 0x49ed}], 0x2, 0x0, 0x0, 0x1a0}, 0xe869) 11:48:29 executing program 3: openat$vcsu(0xffffffffffffff9c, 0x0, 0x402002, 0x0) 11:48:29 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000110025040000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:29 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, 0x0) 11:48:29 executing program 2: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) write$khugepaged_scan(r0, 0x0, 0x0) [ 476.570852][T31525] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 476.627213][T31525] bond61: (slave bridge144): Enslaving as a backup interface with an up link 11:48:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14}, 0x14}}, 0x4050) 11:48:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001500)={0x58, 0x0, &(0x7f0000001380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs_done], 0x4, 0x0, &(0x7f00000014c0)="590ec9f4"}) 11:48:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 11:48:29 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000110025040000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:29 executing program 0: setrlimit(0x0, &(0x7f0000000000)={0x1, 0x1}) 11:48:29 executing program 1: syz_mount_image$adfs(&(0x7f0000000000)='adfs\x00', 0x0, 0x0, 0x0, 0x0, 0x684fb556e3825ae1, &(0x7f00000002c0)) 11:48:29 executing program 2: syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) 11:48:30 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000004380)) 11:48:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001500)={0x58, 0x0, &(0x7f0000001380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs_done], 0x4, 0x0, &(0x7f00000014c0)="590ec9f4"}) 11:48:30 executing program 0: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/cachefiles\x00', 0x0, 0x0) [ 477.018606][T31587] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000080000000a00090005000000aabb00009e"], 0x20}}, 0x0) [ 477.126630][T31596] bond62: (slave bridge145): Enslaving as a backup interface with an up link 11:48:30 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14}, 0x14}}, 0x0) 11:48:30 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @local}}, 0x1e) 11:48:30 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 11:48:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001500)={0x58, 0x0, &(0x7f0000001380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs_done], 0x4, 0x0, &(0x7f00000014c0)="590ec9f4"}) 11:48:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x9effffff, &(0x7f00000000c0)={0x0}}, 0x0) 11:48:30 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001100250400000000000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:30 executing program 3: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f00000014c0)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], 0x2, 0x0) 11:48:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001500)={0x58, 0x0, &(0x7f0000001380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs_done], 0x4, 0x0, &(0x7f00000014c0)="590ec9f4"}) 11:48:30 executing program 0: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x450100, 0x0) 11:48:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, "ae1f346839790548ce70a143caf3d267471d2d2d65ffef801e01d910fa429daf"}) 11:48:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) [ 477.479117][T31660] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={0x0}}, 0x0) 11:48:30 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') socket$nl_generic(0x10, 0x3, 0x10) 11:48:30 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 11:48:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'gre0\x00', 0x0}) [ 477.628808][T31660] bond63: (slave bridge146): Enslaving as a backup interface with an up link 11:48:30 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') read$char_raw(r0, &(0x7f0000001c00)={""/64236}, 0xfc00) 11:48:30 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000380)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) 11:48:30 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001100250400000000000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:30 executing program 2: linkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) 11:48:30 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x6e842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x5000}], 0x1, 0x4200, 0x0, 0x3) 11:48:30 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000080)) 11:48:30 executing program 1: futex(&(0x7f00000000c0)=0x1, 0x8c, 0x1, 0x0, &(0x7f0000000180), 0x1) 11:48:30 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x0, 0x0) bind$phonet(r0, 0x0, 0x0) [ 477.890283][T31724] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') read$char_raw(r0, &(0x7f0000000200)={""/48420}, 0xbe00) 11:48:30 executing program 2: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, 0x0, 0x1bdb1aa416b443d4) 11:48:31 executing program 2: futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x0) [ 478.049540][ T35] audit: type=1800 audit(1611834511.025:21): pid=31751 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16225 res=0 errno=0 11:48:31 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r0, &(0x7f0000000180)=""/230, 0xe6) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 11:48:31 executing program 3: ioctl$sock_ifreq(0xffffffffffffffff, 0x8949, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, 0x0, 0x10000841) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x8080, 0x0) listxattr(0x0, &(0x7f0000000a40)=""/133, 0x85) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_mount_image$adfs(&(0x7f0000000d80)='adfs\x00', &(0x7f0000000dc0)='./file0\x00', 0x0, 0x4, &(0x7f0000001100)=[{&(0x7f0000000e00)="4c80a35bf763890013c34c5baf4e9562e59a74bfa7788c1012fecd31b309b0afd496525675c6eff29d4c68ca29eb397fa25f1ca730c67cca404ff8f72c9fee86b8b9895c5b5d9dc696f865e9877e3e1136674284956c4fa82f8a6a391f585ea7a01983db9adff1b5b3d7342416488239ee6fc29df2f941af3ac6afc4c0cdebafb1d8c5478bdaa5", 0x87}, {&(0x7f0000000ec0)="85cf12d97962e402cfd9eda9370e26f968a3706fc5963a92310c4877cd6ae7a9220f330ac829dd6cb383dc791dcb8eb075f6fbf014b7d6efa2b875626c7facf1091eac775fbadedac37aeb89575ed189c12b9ea85b502415e9a26b794e1e3432067042da1d1c78b1c6cc425c4d47f5e02e6220c01c8cf8b6a285922ebed04cbc55acd2207423fe5c57419e8f09696a79b4b46f211dd3", 0x96, 0x50e5}, {&(0x7f0000000f80)="74900b943e8f2b9ac8dfb1275e94a02c6ff61e2508493be060aeba2e10a9c819a70d3d31250120787eb3b7259bfe5067116595c51f0820112c21a85ba406eddf31a47291c18b189bd39a3a8fc7e3a1d83c98ee57822678c641615d4817f1681422b9b5f2737e54762f41558d94cfd6fda031df87cb8917c643913caea5de05ff3a56e6abd06c2d678b329e2f155dabb6fe8b63df94324415fb1daea81b8a08f7a945a28be2041b9c5e3a1cad5c1279ab01c14e1b98d6bdf57402aa4787669de566c6d517bedf8b89b1394b8bb8b84ca0275fbc05d675d512cda6b584598cb3285b68901678a59b51e300e4698bd25c3384ab577ed8049a3e24", 0xf9, 0x1}, {&(0x7f0000001080)="4de6b31e1af241493d8a78a1e33f8e75a7aab55f3f92ea9d3c527992e01e7483d70981468497aa87a38f4298f649bc0304a0ba2514e4c5d96305bbfde4ebdcd10d0d52301b1fdf5dd4", 0x49, 0xff}], 0x2, &(0x7f0000001180)={[{}, {}, {'geneve0\x00'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '&\x00'}}, {@subj_role={'subj_role', 0x3d, '*-'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'geneve0\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ns/cgroup\x00'}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x40, 0x0, 0x1905, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xd5}]}, 0x40}, 0x1, 0x0, 0x0, 0x85}, 0xc000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x18, 0x1409, 0x418, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x5473a775f5b6bdb7}, 0x10002011) [ 478.108405][T31732] bond64: (slave bridge147): Enslaving as a backup interface with an up link [ 478.132126][ T35] audit: type=1800 audit(1611834511.095:22): pid=31729 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16225 res=0 errno=0 11:48:31 executing program 1: mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x30, 0xffffffffffffffff, 0x0) 11:48:31 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001100250400000000000000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={0x0}, 0x300}, 0x0) 11:48:31 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000180)=""/170, 0x26, 0xaa, 0x1}, 0x20) [ 478.250462][T31783] loop3: detected capacity change from 80 to 0 11:48:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x15) [ 478.292093][T31783] ADFS-fs (loop3): unrecognised mount option "geneve0" or missing value 11:48:31 executing program 4: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000009c0)={'sit0\x00', 0x0}) 11:48:31 executing program 2: socket(0x0, 0x5711eacd739a951c, 0x0) 11:48:31 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000021c0)) 11:48:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000b00)='batadv\x00') [ 478.429210][T31798] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c010000bd577b"], 0x13c}}, 0x0) 11:48:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x22, &(0x7f0000000540)=[@in={0x2, 0x3, @local}], 0x10) 11:48:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003ac0)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000038c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}], 0x20}], 0x1, 0x0) 11:48:31 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000480)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @bcast]}, 0x48) [ 478.641657][T31804] bond65: (slave bridge148): Enslaving as a backup interface with an up link 11:48:31 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001100250400000000000000001000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:31 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0xc8002, 0x0) 11:48:31 executing program 3: syz_mount_image$adfs(&(0x7f0000000d80)='adfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)) 11:48:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) [ 478.781145][T31857] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de 11:48:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') read$char_raw(r0, 0x0, 0x0) 11:48:31 executing program 3: r0 = memfd_create(&(0x7f0000000500)='+\x8b\xf9\xff\xff\xff\xff\xff\xff\xff(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fstat(r0, 0x0) [ 478.839915][T31863] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:31 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60}, 0x60) 11:48:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x7d, &(0x7f0000000540)=[@in={0x2, 0x0, @local}], 0x10) 11:48:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={0x0, 0xf0ff7f00000000}}, 0x0) [ 478.994183][T31867] bond66: (slave bridge149): Enslaving as a backup interface with an up link 11:48:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') read$char_raw(r0, &(0x7f000000c100)=ANY=[], 0xbe00) 11:48:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x34, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffe0}}, [{0x8}, {0x8}]}, 0x34}}, 0x0) 11:48:32 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001100250400000000000000001000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xa808) 11:48:32 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vcsu\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20008094) listxattr(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=""/133, 0x85) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_mount_image$adfs(&(0x7f0000000d80)='adfs\x00', &(0x7f0000000dc0)='./file0\x00', 0x0, 0x4, &(0x7f0000001100)=[{&(0x7f0000000e00)="4c80a35bf763890013c34c5baf4e9562e59a74bfa7788c1012fecd31b309b0afd496525675c6eff29d4c68ca29eb397fa25f1ca730c67cca404ff8f72c9fee86b8b9895c5b5d9dc696f865e9877e3e1136674284956c4fa82f8a6a391f585ea7a01983db9adff1b5b3d7342416488239ee6fc29df2f941af3ac6afc4c0cdebafb1d8c5478bdaa5", 0x87}, {&(0x7f0000000ec0)="85cf12d97962e402cfd9eda9370e26f968a3706fc5963a92310c4877cd6ae7a9220f330ac829dd6cb383dc791dcb8eb075f6fbf014b7d6efa2b875626c7facf1091eac775fbadedac37aeb89575ed189c12b9ea85b502415e9a26b794e1e3432067042da1d1c78b1c6cc425c4d47f5e02e6220c01c8cf8b6a285922ebed04cbc55acd2207423fe5c57419e8f0969", 0x8e, 0x50e5}, {&(0x7f0000000f80)="74900b943e8f2b9ac8dfb1275e94a02c6ff61e2508493be060aeba2e10a9c819a70d3d31250120787eb3b7259bfe5067116595c51f0820112c21a85ba406eddf31a47291c18b189bd39a3a8fc7e3a1d83c98ee57822678c641615d4817f1681422b9b5f2737e54762f41558d94cfd6fda031df87cb8917c643913caea5de05ff3a56e6abd06c2d678b329e2f155dabb6fe8b63df94324415fb1daea81b8a08f7a945a28be2041b9c5e3a1cad5c1279ab01c14e1b98d6bdf57402aa47", 0xbc, 0x1}, {&(0x7f0000001080)="4de6b31e1af241493d8a78a1e33f8e75a7aab55f3f92ea9d3c527992e01e7483d70981468497aa87a38f4298f649bc0304a0ba2514e4c5d96305bbfde4ebdcd10d", 0x41}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x48, 0x0, 0x1905, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xd5}]}, 0x48}, 0x1, 0x0, 0x0, 0x85}, 0x0) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xf, &(0x7f0000001380)=""/100, &(0x7f0000001400)=0x64) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x18, 0x1409, 0x418, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x5473a775f5b6bdb7}, 0x10002011) 11:48:32 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x37) 11:48:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2400, 0x0) [ 479.189202][T31919] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0xc0, &(0x7f00000000c0)={0x0}}, 0x0) [ 479.324737][T31941] loop3: detected capacity change from 80 to 0 11:48:32 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000004340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) 11:48:32 executing program 0: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002780)='/dev/cachefiles\x00', 0x10000, 0x0) 11:48:32 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80)='batadv\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 11:48:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) [ 479.418578][T31923] bond67: (slave bridge150): Enslaving as a backup interface with an up link 11:48:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0, 0x8000000000000000}}, 0x0) 11:48:32 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d0, 0xc8, 0x0, 0x1d0, 0x5803, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x0, 0x6}}, @common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @loopback, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 11:48:32 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001100250400000000000000001000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) [ 479.509739][T31972] loop3: detected capacity change from 80 to 0 11:48:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0, 0x4}}, 0x0) 11:48:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x36c, 0x1}, 0x40) 11:48:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000900)=[{&(0x7f0000000880)=""/43, 0x2b}], 0x1, 0x0, 0x0) 11:48:32 executing program 1: connect$ax25(0xffffffffffffffff, 0x0, 0x0) [ 479.679527][T31995] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c80)={0x0}}, 0x0) 11:48:32 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getpeername$netlink(r0, 0x0, 0x0) 11:48:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x0, @local}], 0x20000550) 11:48:32 executing program 3: syz_mount_image$adfs(&(0x7f00000027c0)='adfs\x00', &(0x7f0000002800)='./file0\x00', 0x0, 0x0, &(0x7f0000003c00), 0x1000, &(0x7f0000003cc0)) [ 479.860038][T32003] bond68: (slave bridge151): Enslaving as a backup interface with an up link 11:48:32 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000004100)='/dev/vcsu\x00', 0x200000, 0x0) 11:48:32 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000880)='/dev/zero\x00', 0x1, 0x0) 11:48:32 executing program 4: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0xc0000000) 11:48:33 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000110025040000000000000000100000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:33 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000500)={[{@grpjquota='grpjquota'}]}) 11:48:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003ac0)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0}], 0x1, 0xc001) 11:48:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x321, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 11:48:33 executing program 3: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc}}, 0x0) 11:48:33 executing program 4: syz_mount_image$adfs(&(0x7f0000000d80)='adfs\x00', &(0x7f0000000dc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)) [ 480.143593][T32067] REISERFS warning (device loop0): super-6504 reiserfs_getopt: the option "grpjquota" requires an argument [ 480.143593][T32067] 11:48:33 executing program 4: clock_adjtime(0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3ff, 0x2, 0x8, 0x7, 0x2, 0x35ad, 0x1, 0x10001, 0x2}) 11:48:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x701, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x20}}, 0x0) 11:48:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000003740)=[{0x0}, {&(0x7f0000003580)=""/5, 0x5}], 0x2}}], 0x1, 0x0, 0x0) [ 480.229929][T32079] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:33 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vcsu\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, 0x0, 0x0) [ 480.295881][T32067] REISERFS warning (device loop0): super-6504 reiserfs_getopt: the option "grpjquota" requires an argument [ 480.295881][T32067] 11:48:33 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00') [ 480.403308][T32079] bond69: (slave bridge152): Enslaving as a backup interface with an up link 11:48:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 11:48:33 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000110025040000000000000000100000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) 11:48:33 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0045878, 0x0) 11:48:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000040)='h', 0x1, 0x0, 0x0, 0x0) 11:48:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x1e, &(0x7f0000000540)=[@in={0x2, 0x0, @local}], 0x10) 11:48:33 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x0, @remote}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}], 0x3c) 11:48:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x22, &(0x7f0000000540)=[@in={0x2, 0x0, @local}], 0x10) 11:48:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') read$char_raw(r0, &(0x7f0000000200)=ANY=[], 0xbe00) 11:48:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={0x0}, 0x1, 0x0, 0x6000}, 0x0) 11:48:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r0, 0x0) [ 480.744661][T32149] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:33 executing program 0: syz_mount_image$adfs(&(0x7f0000000d80)='adfs\x00', &(0x7f0000000dc0)='./file0\x00', 0x0, 0x0, &(0x7f0000001100), 0x0, &(0x7f0000001180)) 11:48:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000040)='h', 0x1, 0x0, 0x0, 0x0) 11:48:33 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0xa500, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x105) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x3, 0x0, "7900000000000000008000000000000000000000000200000000000000000000000000000000000000a8a4c0270000000000000000000000070000000000f7fff408ffffffff00"}, 0xd8) recvmsg(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6}, 0x0) r1 = getpid() sched_setattr(0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, r1}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) [ 480.839423][T32176] bond70: (slave bridge153): Enslaving as a backup interface with an up link 11:48:33 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000110025040000000000000000100000", @ANYRES32=r10], 0x20}, 0x1, 0x34000}, 0x0) [ 480.900418][T32194] ADFS-fs (loop0): error: can't find an ADFS filesystem on dev loop0. 11:48:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x6000}, 0x0) 11:48:34 executing program 1: syz_genetlink_get_family_id$ethtool(&(0x7f0000000280)='ethtool\x00') [ 481.003902][T32194] ADFS-fs (loop0): error: can't find an ADFS filesystem on dev loop0. 11:48:34 executing program 4: r0 = socket(0x2, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="de", 0x1}], 0x1, &(0x7f00000001c0)=[{0x10}], 0x10}, 0x0) 11:48:34 executing program 0: syz_mount_image$adfs(&(0x7f0000000d80)='adfs\x00', &(0x7f0000000dc0)='./file0\x00', 0x0, 0x0, &(0x7f0000001100), 0x0, &(0x7f0000001180)) [ 481.098041][T32214] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:48:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x11, 0xb, 0x0, 0x0) 11:48:34 executing program 2: r0 = socket(0x28, 0x2, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 481.211798][T32239] ADFS-fs (loop0): error: can't find an ADFS filesystem on dev loop0. [ 481.260938][T32230] bond71: (slave bridge154): Enslaving as a backup interface with an up link 11:48:34 executing program 4: socket(0x11, 0x2, 0x1) 11:48:34 executing program 0: syz_mount_image$adfs(&(0x7f0000000d80)='adfs\x00', &(0x7f0000000dc0)='./file0\x00', 0x0, 0x0, &(0x7f0000001100), 0x0, &(0x7f0000001180)) 11:48:34 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$alg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001440)=[{0x0}, {&(0x7f0000000180)='J', 0x1}, {&(0x7f0000000000)='E', 0x1}], 0x3}, 0x0) 11:48:34 executing program 1: syz_mount_image$adfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000003c00)=[{&(0x7f0000003840)="03", 0x1, 0x7fffffff}], 0x0, 0x0) [ 481.452452][T32273] loop1: detected capacity change from 264192 to 0 [ 481.568697][T32276] ADFS-fs (loop0): error: can't find an ADFS filesystem on dev loop0. [ 481.586138][T32273] loop1: detected capacity change from 264192 to 0 11:48:34 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0xa500, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x105) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x3, 0x0, "7900000000000000008000000000000000000000000200000000000000000000000000000000000000a8a4c0270000000000000000000000070000000000f7fff408ffffffff00"}, 0xd8) recvmsg(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6}, 0x0) r1 = getpid() sched_setattr(0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, r1}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) 11:48:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 11:48:34 executing program 4: socket$netlink(0x10, 0x3, 0x8187ed30f5be5bef) 11:48:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 11:48:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89a0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}}) 11:48:34 executing program 0: syz_mount_image$adfs(&(0x7f0000000d80)='adfs\x00', &(0x7f0000000dc0)='./file0\x00', 0x0, 0x0, &(0x7f0000001100), 0x0, &(0x7f0000001180)) [ 481.893695][T32302] ADFS-fs (loop0): error: can't find an ADFS filesystem on dev loop0. 11:48:34 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000003b40), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) 11:48:34 executing program 2: syz_mount_image$ntfs(&(0x7f0000002000)='ntfs\x00', &(0x7f0000002040)='./file0\x00', 0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000002100)={[{@dmask={'dmask'}}]}) 11:48:34 executing program 5: syz_mount_image$udf(&(0x7f00000174c0)='udf\x00', &(0x7f0000017500)='./file0\x00', 0x0, 0x0, &(0x7f0000017700), 0x0, &(0x7f0000017780)={[{@longad='longad'}], [{@uid_eq={'uid'}}]}) 11:48:35 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0xa500, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x105) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x3, 0x0, "7900000000000000008000000000000000000000000200000000000000000000000000000000000000a8a4c0270000000000000000000000070000000000f7fff408ffffffff00"}, 0xd8) recvmsg(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6}, 0x0) r1 = getpid() sched_setattr(0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, r1}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) 11:48:35 executing program 1: r0 = socket(0x28, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) 11:48:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x403, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) 11:48:35 executing program 0: clock_gettime(0x1, &(0x7f00000001c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x0, @multicast2}], 0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000240)=0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89a1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x14}, 0x14}}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x4008840) [ 482.136754][T32315] ntfs: (device loop2): parse_options(): Unrecognized mount option . 11:48:35 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0xa500, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x105) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x3, 0x0, "7900000000000000008000000000000000000000000200000000000000000000000000000000000000a8a4c0270000000000000000000000070000000000f7fff408ffffffff00"}, 0xd8) recvmsg(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6}, 0x0) r1 = getpid() sched_setattr(0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, r1}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) 11:48:35 executing program 4: r0 = socket(0x2, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 11:48:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r0, &(0x7f0000000940)={0x2020}, 0x2020) [ 482.304579][T32329] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 482.360225][T32315] ntfs: (device loop2): parse_options(): Unrecognized mount option . [ 482.369627][T32329] UDF-fs: Scanning with blocksize 512 failed 11:48:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0xa, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x80000500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setregs(0xd, 0x0, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\t%ust\xe3c*sgrVex:De', 0x0) 11:48:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x321, 0x0, 0x0, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x24}}, 0x0) [ 482.402055][T32329] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 482.410638][T32329] UDF-fs: Scanning with blocksize 1024 failed [ 482.418032][T32329] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 482.427856][T32329] UDF-fs: Scanning with blocksize 2048 failed [ 482.434932][T32329] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 482.442469][T32329] UDF-fs: Scanning with blocksize 4096 failed 11:48:35 executing program 3: clock_adjtime(0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x43}) [ 482.514701][T32329] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 482.522371][T32329] UDF-fs: Scanning with blocksize 512 failed 11:48:35 executing program 0: socketpair(0xa, 0x1, 0x84, &(0x7f0000000040)) [ 482.570828][T32329] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 482.645734][T32329] UDF-fs: Scanning with blocksize 1024 failed [ 482.664433][T32329] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 482.681892][T32329] UDF-fs: Scanning with blocksize 2048 failed [ 482.722964][T32329] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 482.730374][T32329] UDF-fs: Scanning with blocksize 4096 failed 11:48:35 executing program 5: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x2800) 11:48:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 11:48:35 executing program 4: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000440)='rxrpc\x00', 0x0, 0x0, 0x0, r0) 11:48:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) 11:48:35 executing program 2: syz_mount_image$ntfs(0x0, &(0x7f0000008d40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@privport='privport'}]}}) 11:48:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002019200020002000200020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f45", 0x5b, 0x8800}], 0x0, &(0x7f00000002c0)=ANY=[]) 11:48:35 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000012c0)="1b00000019007faf37c0f2b2a4a280930a000310000243dc900523", 0x1b}], 0x1}, 0x0) [ 482.888623][T32371] 9pnet: Insufficient options for proto=fd [ 483.027574][T32379] loop0: detected capacity change from 136 to 0 [ 483.046251][T32379] ISOFS: Logical zone size(0) < hardware blocksize(1024) 11:48:36 executing program 1: openat$vcsu(0xffffffffffffff9c, 0x0, 0x400, 0x0) 11:48:36 executing program 3: r0 = socket(0x2, 0x5, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14}, 0x14}}, 0x2000c010) 11:48:36 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) 11:48:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x20}}, 0x0) 11:48:36 executing program 2: futex(&(0x7f0000004400), 0x8c, 0x1, &(0x7f0000005380), &(0x7f00000053c0), 0x0) 11:48:36 executing program 0: clock_gettime(0x35fcce2352bed4e9, 0x0) 11:48:36 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf0ff7f}}, 0x0) 11:48:36 executing program 3: futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x1) 11:48:36 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x11) 11:48:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x321, 0x0, 0x0, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x9}]}, 0x24}}, 0x0) 11:48:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0, 0xf0ff7f00000000}}, 0x0) 11:48:36 executing program 0: socketpair(0x23, 0x80000, 0xb17, &(0x7f00000005c0)) 11:48:36 executing program 4: r0 = socket(0x2, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @empty, 'veth0_to_hsr\x00'}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)='q', 0x1}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="0001"], 0x100}, 0x0) 11:48:36 executing program 1: r0 = socket(0x2, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0001"], 0x100}, 0x0) 11:48:36 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={0x0, 0x0, 0x18}, 0x10) 11:48:36 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname$netlink(r0, 0x0, &(0x7f00000000c0)) 11:48:36 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 11:48:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14}, 0x65}}, 0x0) 11:48:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000005ac0)={'ip6tnl0\x00', 0x0}) 11:48:36 executing program 3: syz_mount_image$fuse(&(0x7f0000004900)='fuse\x00', &(0x7f0000004940)='./file0\x00', 0x0, 0x0, 0x0, 0x50, &(0x7f0000004980)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee00}}) 11:48:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x0, 0x70bd2d, 0x0, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x1c}}, 0x4050) 11:48:36 executing program 2: clock_gettime(0x1, &(0x7f00000001c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x0, @multicast2}], 0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000240)=0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89a0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x14}, 0x14}}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x4008840) [ 483.916049][T32435] fuse: Bad value for 'fd' [ 483.930409][T32435] fuse: Bad value for 'fd' 11:48:36 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0x5460, 0x0) 11:48:37 executing program 0: syz_mount_image$ntfs(&(0x7f0000002000)='ntfs\x00', &(0x7f0000002040)='./file0\x00', 0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000002100)={[{@errors_recover='errors=recover'}, {@dmask={'dmask'}}, {@case_sensitive_no='case_sensitive=no'}, {@umask={'umask'}}, {@case_sensitive_no='case_sensitive=no'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'maciceland'}}, {@uid={'uid', 0x3d, 0xee01}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@case_sensitive_yes='case_sensitive=yes'}]}) 11:48:37 executing program 3: syz_mount_image$adfs(&(0x7f00000027c0)='adfs\x00', &(0x7f0000002800)='./file0\x00', 0x0, 0x2, &(0x7f0000003c00)=[{&(0x7f0000002840)="7bd21ef7cc11054e1d70244ef25bf02d87ade134ebc1c443a3e0eb8242e90c1af8dd34", 0x23}, {&(0x7f0000003840)="03", 0x1, 0x7fffffff}], 0x1000, &(0x7f0000003cc0)={[{'&!'}]}) 11:48:37 executing program 4: socket(0x1d, 0x0, 0xfffffe00) 11:48:37 executing program 1: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={0x0}}, 0x1bdb1aa416b443d4) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={0x0}}, 0x1bdb1aa416b443d4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={0x0}}, 0x1bdb1aa416b443d4) 11:48:37 executing program 2: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0xfffffffffffffdd2) [ 484.126048][T32452] ntfs: (device loop0): parse_options(): The case_sensitive option requires a boolean argument. [ 484.145936][T32453] loop3: detected capacity change from 264192 to 0 [ 484.274330][T32452] ntfs: (device loop0): parse_options(): The case_sensitive option requires a boolean argument. 11:48:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r1, 0x403, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) 11:48:37 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 11:48:37 executing program 2: socketpair(0xb, 0x0, 0x0, &(0x7f0000000280)) 11:48:37 executing program 3: socketpair(0x29, 0x0, 0x0, &(0x7f0000001400)) 11:48:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x403}, 0x14}}, 0x0) 11:48:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 11:48:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003ac0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 11:48:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 11:48:37 executing program 3: socketpair(0xa, 0x1, 0x3, &(0x7f0000000040)) 11:48:37 executing program 1: socketpair(0xa, 0x2, 0x73, &(0x7f0000000040)) 11:48:37 executing program 2: socketpair(0x23, 0x80000, 0x0, &(0x7f00000005c0)) 11:48:37 executing program 5: futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080), 0x1) 11:48:38 executing program 4: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept$alg(r0, 0x0, 0x0) 11:48:38 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 11:48:38 executing program 1: syz_genetlink_get_family_id$batadv(0xfffffffffffffffe) 11:48:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0xa, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\t%ust\xe3c*sgrVex:De', 0x0) 11:48:38 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0/file0\x00'}, 0x10) 11:48:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24, 0x0) 11:48:38 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000004340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 11:48:38 executing program 0: openat$vcsu(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) 11:48:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 11:48:38 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x8, 0x0, "ae1f346839790548ce70a143caf3d267471d2d2d65ffef801e01d910fa429daf"}) 11:48:38 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x0, 0x6, 0x1, 0x5, 0x0, 0x2, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000080)}, 0x808, 0x6, 0x0, 0x8, 0x8, 0x8, 0x400}, 0xffffffffffffffff, 0x0, r0, 0x0) listen(r1, 0x0) 11:48:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000025c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:48:38 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000480)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @bcast]}, 0x48) 11:48:38 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) 11:48:38 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) [ 485.511766][T32537] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de 11:48:38 executing program 5: mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x0) [ 485.560880][T32543] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de 11:48:38 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffff9) 11:48:38 executing program 0: socket(0x3, 0x0, 0x10001) 11:48:38 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x0, 0x6, 0x1, 0x5, 0x0, 0x2, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000080)}, 0x808, 0x6, 0x0, 0x8, 0x8, 0x8, 0x400}, 0xffffffffffffffff, 0x0, r0, 0x0) listen(r1, 0x0) 11:48:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001500)={0x58, 0x0, &(0x7f0000001380)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs_done], 0x4, 0x0, &(0x7f00000014c0)="590ec9f4"}) 11:48:38 executing program 1: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpeername$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x10) 11:48:38 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001500)={0x6c, 0x0, &(0x7f0000001380)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x7, 0x2, 0x10}, @fda={0x66646185, 0x20a, 0x1, 0x1d}, @flat=@weak_handle={0x77682a85, 0x3101, 0x1}}, &(0x7f0000000140)={0x0, 0x20, 0x40}}}, @increfs_done={0x40106308, 0x2}, @acquire_done={0x40106309, 0x2}], 0x3d, 0x0, &(0x7f00000014c0)="590ec9f4434168884b367f7d67be20d59ee86f4aee4a90dbdde058c347de88f16884509922fce7a97922cf44c077dc197f7507fae4cdc151851031742d"}) 11:48:38 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 11:48:38 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0xfffffffffffffed3) 11:48:38 executing program 2: syz_open_dev$ndb(&(0x7f0000000440)='/dev/nbd#\x00', 0x0, 0x62585) 11:48:38 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 11:48:38 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x0, 0x6, 0x1, 0x5, 0x0, 0x2, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000080)}, 0x808, 0x6, 0x0, 0x8, 0x8, 0x8, 0x400}, 0xffffffffffffffff, 0x0, r0, 0x0) listen(r1, 0x0) 11:48:38 executing program 5: r0 = socket(0x11, 0x2, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={0x0}}, 0x0) [ 485.945696][T32566] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 11:48:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 11:48:39 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 11:48:39 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 11:48:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x5c, 0x0, &(0x7f0000000180)=[@increfs, @acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:48:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) 11:48:39 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x0, 0x6, 0x1, 0x5, 0x0, 0x2, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000080)}, 0x808, 0x6, 0x0, 0x8, 0x8, 0x8, 0x400}, 0xffffffffffffffff, 0x0, r0, 0x0) listen(r1, 0x0) 11:48:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0, 0xf0ff7f}}, 0x0) [ 486.219179][T32585] binder: 32582:32585 ioctl c0306201 0 returned -14 11:48:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000540)=[@in={0xa, 0x0, @local}], 0x10) [ 486.266379][T32585] binder: 32582:32585 ioctl c0306201 0 returned -14 11:48:39 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)={0x14, r0, 0x1}, 0x14}}, 0x0) 11:48:39 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) 11:48:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0, 0x24}}], 0x1, 0x0, 0x0) 11:48:39 executing program 1: bpf$ITER_CREATE(0x21, 0x0, 0x0) 11:48:39 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000600)=@netrom={'nr', 0x0}, 0x10) 11:48:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d80)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000a10200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000c100000000000000000000000000f8bb048c0000000000f3000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000040000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000001000000000000000000000000000000000000000000900000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000d80)=ANY=[@ANYRES32], 0x1) 11:48:39 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001500)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000001540)={0x2020}, 0x2020) 11:48:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006800)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000017880)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000004f00)=ANY=[@ANYBLOB=' '], 0x20}], 0x1, 0x0) [ 486.619636][T32613] x_tables: ip_tables: CT target: only valid in raw table, not ÿÿÿÿ 11:48:40 executing program 5: socketpair(0xa, 0x5, 0x0, &(0x7f0000000080)) 11:48:40 executing program 1: syz_mount_image$romfs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000051c0)='./file0\x00', &(0x7f0000005200)='./file0\x00', 0x0, 0x1001814, 0x0) mount$fuseblk(0x0, &(0x7f0000002b00)='./file0\x00', 0x0, 0x8a009c, 0x0) 11:48:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x321, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 11:48:40 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0xe4e41e1d06077a53, 0x0) 11:48:40 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000180)=""/170, 0x1a, 0xaa, 0x1}, 0x20) 11:48:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x58}}, 0x0) [ 487.064498][ T35] audit: type=1800 audit(1611834520.063:23): pid=32596 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="/" dev="fuse" ino=1 res=0 errno=0 11:48:40 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getpeername$netlink(r0, 0x0, &(0x7f0000000040)) 11:48:40 executing program 2: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$llc(r0, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) 11:48:40 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, &(0x7f0000000600)=""/96, 0x0, 0x60}, 0x20) 11:48:40 executing program 3: socketpair(0x591229e1cb3cbaab, 0x0, 0x0, &(0x7f0000000040)) 11:48:40 executing program 1: r0 = socket(0x2, 0x5, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0) 11:48:40 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000004300)='/dev/mISDNtimer\x00', 0x40, 0x0) 11:48:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') read$char_raw(r0, &(0x7f0000000200)={""/48420}, 0xbe00) read$char_raw(r0, 0x0, 0x0) 11:48:40 executing program 2: r0 = socket(0x2, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x2022) 11:48:40 executing program 3: openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) 11:48:40 executing program 4: socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$dri(&(0x7f0000000800)='/dev/dri/card#\x00', 0xe5, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000880)='/dev/zero\x00', 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/zero\x00', 0xc00, 0x0) 11:48:40 executing program 5: syz_mount_image$adfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000003c00)=[{&(0x7f0000002840)="7bd21ef7cc11054e1d70244ef25bf02d87ade134ebc1c443a3e0eb8242e90c1af8dd3436562fc91c7b1cd5bb188f964deb0767b3c8e7d76bd06227522ca1b7c6819012391781f7d1802bcba61ac1a3e6d759f9a67806925b2f76ddd5e4b494a959fd8a437bc91c0b7991595371421292180f647ae61d054e42dfbd3eb7c64ebf92b54d1652f830307c9186ab18fc0fd54b579f2564a9e0476c3145caa1c24fe2178ccf91628d86832774cd5c02bc68f47dd10eef63a23d9a75fff7429ffea26805357c273876fe16d92c0a79707c8fe79f82ac909d54cebe93dd4ffdf5535f769f82fa5b1cee985c8177603359aac2faa5852987b84356d59ab6868adb8ab1a52eecaad874a77b12e1f2cce4bef0d3250365e048cafaf4374cad2609f78a1cf0799da645af9f082269e1b6bed1e2522c703f622db236143cf937962f246592f865b34c846f762526a1608f9753a876021ea6b65b8bcb60ef89d639a3d1ac24e2334bf15b962ae6b44f553b30b5f1eadffe6a67812433631d9814c320f75f07d13ad95feb714fb83480945a70ecafbc072da0cbc77a01fa65b9104226d001653ba83f2b80a7d48a39c37a58a100702404dc3c4a18f8a30dd055165b804bf71a5dd863c2c0dba0b1e09f2ed99b332532bc10c5089fd94e7ef3c2e8ab9d5318d45b6af1d80cc5b8a2809c5be704d8cfbff0269f5a21c6ad028bd64f6c2e1d99272afcd3170df454f8df741ba1b5708a411f8e6054f8130a5cf58878d9a46f96b7e76f193fe5ade5d99d76c1176bd1760c3af48ef88e6cb0b44455bc455653e21f6a068ed7a6bfed72a27c49f213d728575b75e1ae6ae860f5a416eae9aff2a28cf1d43c9e826d90197e60ae252bffc1daac8f1480dc1d5b6e8a953ad87e19c10be3bc33a0bdb1ed4fdf3a6ed0dcaf8dadf2d8a18c28d248bb8997a8e78711a4763d9740dae34971d37b9184b65de774e73c95a1e6a486392fbab0a04f3c5595197e01667fc5e115af8662ae69cdc35e8a326c3ddea9dde0eef3bf5c6c916281e4c5725ddc5b98097efa854894c39963ed20b30a173cb5a6ff0fb2e22688c727b2d77df630bdaf4c302a00a3ab6eea868da4fb0ac27aaf31ef6ede6b5e41b413f247550a878d6e1121352292f24a20fe7d56691ca9dd3a7ca36c7bc6be0dbe31edacbcefe9157d050d36bbb6f09f0115dcc4f02f158fe915c20d5903d4ce9e88cd854720b923116372d797e2cfa7a0c5c78f56b584687d61c8652b87b71db61cb15349365a307b257ed76c4bf9aa616bed7c231f6053f4c62a4816d19ef441428512a62525fc9ef76e5de9263f3a2f88a694e44d9c66aea9615c51cb28880a0c561a8886fd7dcf6dee7f0fecd1052e407417e968e8a4f94533489b25ce612cca2fc40bcc284ff996156e881acd59401f8912653d25565d926f380ac86e65c5ff9e9560df8abf1040dfc3890a8326f9ec2b8f13c70e2960bc1d85405c24f66604e46608becb9e1a61128f9cb8069166e6d0030d5da960dbec05e41ece304662f55ae84841286e95ddfc40c763cb97dd7d21144b1711b0c28091e38528e40e38283fd998073d09e4e2f43729fbb84558e0a85ce59c18cd2e6d59fa4f71863e3e57ac37a8969b314d56fe3f2642f28894c256a6e242c5c7e0306ad494b2a24c8c80d5f40afac620406669a69209e5761d989efbf3558f0d5c939c8547d2d631dcbb797bd082cf09f6c727c10a76f72749e4b8e62f08631ad93df883bae76aeac63923314b8a269a9148256db66b027eefd9bd086698f4fa98b51fac1770a1dffdb65c205240206fc8300d01bdc12556d9ac3b3437468311f840fa9064d947d9bc126a2df6938df03e10437f34a929e854f13751a3e667a87f0855d1ec094969134bac4260e9b9426a5ae78a2cb292caa950150df2607ede1595ecae22edec92bf8f559f0a7cd4c0fcf3aa92873097ce94c6cd3be45b81ed3ad450d3a2873c6c584b27fd666d2986df4fa27c8d42bba73dbcae16535173d6adf1c27a05e550b0b9816e1395cc5742cced66268b8551a4626945c5231f89b0350374c2a967d783feeb1ee51bad78a171ce6b3368167a76f7a44bd03155eb4c6bbf2c5348c293ad43fb38011c8938df40581565cfb391cb55b4b64650acdd1a60bc913c3f546043c074ec632d8b9492f2071209d356abd067a44b416deea6cf18298c5fcce5492f6230c7c3ba35c4527fe7bf097c35de7519302a5396de3786367158dea5020a56b284b6431dcb36613f9477deecb9628a889c5d1180863f16d4da93f2529b1857c948e675ec7c1f8f1ef55976b9a614e57fea1f686619a5357c1a79eaeeab27fdd3792cd6f9aff99c4e4d63ed8ca819a253284e345a10ce0573e433c14abd891d9c97a4f7587bc009b3aa318addd07c2d2edb95ba2aa67c1ac35ed0eb4e6f938acda243ddcd60296e922a3a9dbd62ac3063a6470482337ba60ecbc9bba4ef55b9cea3dbf367cc8739a26afe53963b4b27709aa11a43e150190faa2caa1771ff1e4b2ba8c04117cc1e81ca62244524ca7edc5e70e0b8bd99f1268f8d59dba988878ce11f1bc43df89d9640eb97d5c40d93141a16f7cc1e4f9d90776a79f1e61fa4af3d6275debc79c9cf5bdf0e4aa781f930708c1cdc11c6ce165e418f4e8d996040e5bdb052a0f50846e2db50b377f1f203047d1dbc6f8e18cf1885bd4f007fd0f7e91815fbf40ae445c099ad9418937cef0bcacfbc615879a5a41e4ff6d5122cedff6baf1e145239605b6e6074dc87336eb2a59658d659d59fa0585478c9633bbd837a9f36fe67780d6df0571ce53e28509ade28394f4e6442e3fedc24face057c8ba4ae72acba5af6b14757fd609692757cba2e45daa3342a65e40338e6eb05a8dfad37e69b241d0676d0b72f6916628891f1cbe0cbc70122f58d0c8b1da8c969fb448b8d315e0bbf91c3f57056207f2cd7b25171af8a635cc39434596971518e4c1c328105fd90f5a5dd392d82b275586584b222bbd7da8560981e63aaeb416e1dd4baa871a3b9d6296815e5fa5e01058b262a9ef8700e32d342a836fda75422cbc8385380c20dff8f2201f32e759901213daef4337b40559e9f3fb09f6f4601a54fe79bf2c3970e1d820b09595f9bc84b11eb365d2a2713f34dc1fb8c33507c54289113786678caf81611fa8caee226dcece1b9dc34e3938658df0344e312a17c70d7d732eb9cb1a6d08a853d9c222ecac0febf40b22e3e2a729114877e33291a7312aa05e456df5cefc1d4b5141ae03d99d7de62b5e77bd7621f27c3f3e305cb6fbe2c0a395a2c5c934b6e384e0c70b1ffc7bf08d76cd6894c68e4c50fee2307cb191ef8e82dcd5b172a6fa590e2eb30666014d11e0c3a2250f4ab2da0fea00026c5caeeda58a4e784de432d29c8a0dffd8c774162c948638243be6e81ebe225a7ea689795064e1d6b176c4391bc6f38c29456a31e52856a0913e812d224d763971b6b6dfc4a9c35ace9e63199a0b78ec22bf862c1daf64facd198a3b9a08086fb638c2b66710aef440139ed7e3755f972e401a19036904fb666127a5da5cb3ff2e8d6c3c07aa42c34ecf897c1d21e6b4c2d3930ab9141d0f6c75f986a8a21997ade1312791289ad8ae66e9cbaece6ceb1cce903db83f737b0688a37f1d19e5bddd0d645dbc3546c2e7e0565ec447ee3f3a80d7a6e7c3d2a39b7453d3dca97146071737a63cd1e1ee049c87b57856bdd3611f4c12d1392b25f4f115baa39c198684dfc38ef25830bda805ec18f288f92cc069091f0fc4e31f40ffbebf793c3e56b8bbed54d225a0b59f399dfedaec39476199af2faf1cae251c481de9520088c6b439a533313f862a436959a882b8a5b16b9d7434881aa34531094d27308bd8b486a9c9b1b98035e6492cbf7a4bf2ca6b19a5bfc3998454c977affe141a0021e31c565c3af90c6b351a99487145ec709ede61b51041618436be48c67dec2786d52e820fcc8b9aec3dbff20bf3333d53385b03c3e398d06d76e8673a1ed36400e60c5444f7ba67c0e49abf4391917ae8a3d97ac0a296e4aad4b32c3e8788ec0eebbcbdbf9171f220eb4bff5e25f6c9458131fb226a8a1f891b0f5d146ae81a0dff0e017d8180c6f8274330525758b775b7047afb11f6bfce52a014351a594f4ff50f910caeb1c59e17d634749f76844c2ac2a94954223aba6733db8a9ce11b68ead94118220c84de10dc16912c180506fec7f15b8606e36485750633698292cb021e0a7b19bec692e13963dbe9a13e7bb18c0abff6564fb86a223004de286e4d3911931f10388b5b06404bd909db1d9c5b38768831634fbcfc73abc67acebc25f255954179ba14bc42d5215260895503a984b4ae1d6bf095b9574a3da5fb3b9d19711dba2af447c4ad8a873f1d9432fb3f36266d4850cf632745c2552dfe557a072135a6c84cd9b7e9943c984bb96fa0d1cf4fc878b59f018d51457606d81050f3626312c38324f82771e928b33945051abd9e3f25c0f4420eaff6af6f713e6552c468c8b7574d72b642f6730952378e8a75e747f4629469299c2a085138f7ca43420a5f76361428cf03cb8102e39efec9fa2553f95b27aac311e1c144c8318b9bce8b705dde37911c8b511f35f28bbf9b6b17298aeea1e5e3e0e8235515df95246d696f921bf6f54793c03eefba51b5aed2b0c2be3cd6b0775e5e353b0a53d44094ddb9b970e969f065dd444923646d818fd9c9c9945d59ed4c224882ec52099a435e6667ad91e6eed606b47998b5a6a6bf20d153af59014c4d889b592dc616178582516654bbf47dc08e439b0a6ef44878d645f829c11076226aba74633034cf63cf0c440391ccb18f5d38a9342b48bbf73646bb93e09be09eac07fc274a3b116ef295f98d81d8ecbdf38840ea59e23ecd951b6fac021235d2718dfbe561233b482588c9f6837fb528fa500f2a8e790c4e6464e995bf2f282c1826792cf18dfcdb67a6d4b0535eedf3644929fc3de88006c9ad770dac9a4130c07b78853270cf2c77b5eb407cb9bc186587a9d9520a67ddb6bd91ccd66e39232e5d1ffb134c9effeae2cf430ae78c9dff8a4d301152ac31e063b09cd56edef6a936d6ebee667b9c0af38890274e8351280be9c1680385950344bca7660c092edae4ece7d5feb849ce4119df0a6f518826826676ba214e9e0db3b4a611b8782986f90247305149edca5ff00ce613f59784cb43d976e9c98401ec7844a94b23fbbcf333e4c144b9c9b1614af3689e2667ddc9ac3f12796137dc4af6b8e0b92eaf1321769654610364746d684953ebb6727acd376b8642e27b009e3e58f810d0fa9ef1281f8b81eb7f5137f80e8de6911144db5fce220c3b9b1a9d67d8f2520ed4a2d3ba685190bcf8df7104b47052dd47a3c9dda003bce6a6746c288fb9a655e620c6c091a3a54c622d2cf3a5f59571f4b43140aef9ed36b443d43df6fdce097e6f34427ecbad1137b23e31f83df1fa3015ef39529b89d192b585d23a860b3f7b848d11c9568c70fef49550b3acbd9fd95dba9f4e9d84c1790c8c7de09f81bdbfcd518cca4afab61c47c734ae10022e456dd02c76b4b1e123b793e45d66c36017e017b795d3012d17ea798a1a2b98212ab0269bf98b77f3eaab0510a404a4dbbef326f7624539fee389429fa2bd6e79bce2be2be58aace9e9ba6c972959ca1e113cef30779055a6b18754a1c025a9902e3348255368377911b60ccbe8aa6e754d1940f299f9337b3e21041af9a1ef10026ce3ce144a906e42043f1d06c6b6355ec5a", 0xff9, 0x8}, {&(0x7f0000003840)="0363", 0x2, 0x7fffffff}], 0x0, 0x0) 11:48:40 executing program 1: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)) 11:48:40 executing program 2: futex(&(0x7f0000004400), 0x8c, 0x1, 0x0, 0x0, 0x0) 11:48:40 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) getpeername$inet6(r1, 0x0, &(0x7f0000000140)) 11:48:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r0, 0x0, 0x0) [ 487.621703][T32668] loop5: detected capacity change from 264192 to 0 11:48:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) 11:48:40 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) 11:48:40 executing program 2: r0 = socket(0x2, 0x5, 0x0) connect$l2tp(r0, 0x0, 0x0) 11:48:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={0x0}, 0x1, 0x0, 0x4}, 0x0) 11:48:40 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000140)=0x1000) 11:48:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1}, 0x24}}, 0x0) 11:48:40 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xb077, 0x0) [ 487.805675][T32668] loop5: detected capacity change from 264192 to 0 11:48:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000003c0)=0x18, 0x4) 11:48:40 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000900)='/proc/self/net/pfkey\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000340), &(0x7f0000000380)={0x9}, 0x0, 0x0, 0x0) 11:48:40 executing program 3: socketpair(0x9, 0x0, 0x0, &(0x7f0000000040)) 11:48:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 11:48:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, 0x0) 11:48:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000440)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 11:48:41 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) 11:48:41 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f00000000c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 11:48:41 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 11:48:41 executing program 2: syz_open_dev$loop(&(0x7f0000004340)='/dev/loop#\x00', 0x0, 0x0) 11:48:41 executing program 1: socket(0x1d, 0xa, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000c40)=0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) 11:48:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 11:48:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xc0}}, 0x0) 11:48:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @dev}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fd, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 11:48:41 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000006d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0) 11:48:41 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000017480)='./cgroup.net/syz0\x00', 0x200002, 0x0) [ 488.435501][T32729] can: request_module (can-proto-0) failed. 11:48:41 executing program 3: syz_mount_image$adfs(&(0x7f0000000080)='adfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20000, &(0x7f00000006c0)) 11:48:41 executing program 4: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)='/proc/self/net/pfkey\x00') [ 488.485244][T32729] can: request_module (can-proto-0) failed. 11:48:41 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 11:48:41 executing program 0: futex(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x8c, 0x0, 0x0, &(0x7f0000000080), 0x0) 11:48:41 executing program 3: write$khugepaged_scan(0xffffffffffffffff, 0x0, 0x0) 11:48:41 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @null, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) 11:48:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x300}, 0x0) 11:48:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 488.768557][T32764] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de 11:48:41 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000005b80)) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffff9) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006740)={0x2020}, 0x2020) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000008bc0)={0x0, &(0x7f0000002280)={0x18, 0x0, 0xffffffff, {0x5}}, &(0x7f00000022c0)={0x18, 0x0, 0x0, {0x6}}, &(0x7f0000002300)={0x18, 0x0, 0x3, {0x1}}, &(0x7f0000002340)={0x18, 0x0, 0xfffffffffffffffa, {0x2}}, &(0x7f00000043c0)={0x28, 0x0, 0x4, {{0x7f, 0xe21, 0x0, r2}}}, &(0x7f0000004400)={0x60, 0x0, 0xfffffffffffff757, {{0x0, 0x0, 0x1, 0x648b7fa2, 0x6e, 0x0, 0x95}}}, &(0x7f0000004480)={0x18, 0xfffffffffffffff5, 0x6}, 0x0, &(0x7f0000004500)={0x20, 0xfffffffffffffff5, 0x4}, &(0x7f0000004540)={0x78, 0x0, 0x9854, {0x0, 0x2, 0x0, {0x1, 0x100000000, 0x90, 0x400080000000, 0x10000, 0x4, 0x7, 0x5, 0x0, 0x0, 0x5, 0x0, 0xee00, 0xbf, 0x1f}}}, &(0x7f00000045c0)={0x90, 0xffffffffffffffda, 0x3f, {0x4, 0x2, 0x6, 0x0, 0x0, 0x7f, {0x4, 0x80000001, 0x4, 0x8001, 0x20002000000000, 0x3ff, 0x14d5, 0x8001, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0xe410}}}, &(0x7f0000004680)={0x78, 0xfffffffffffffffe, 0x9, [{0x0, 0xfff}, {0x0, 0x5, 0x7, 0x0, '%\xeb*&\\,!'}, {0x0, 0x8, 0x12, 0x1, '{/^$[\'[(-/@#,(!\xae$*'}]}, 0x0, &(0x7f0000008ac0)={0xa0, 0x0, 0x200, {{0x4, 0x0, 0x8, 0x0, 0x0, 0x0, {0x4, 0x9, 0x0, 0x11ca, 0x3, 0x6, 0x2, 0x87b, 0x0, 0x2000, 0x80000000, 0xffffffffffffffff, 0x0, 0x0, 0x207}}}}, &(0x7f0000008b80)={0x20, 0x0, 0x4, {0x0, 0x0, 0x1ff}}}) read$FUSE(r0, &(0x7f0000002700)={0x2020}, 0x2020) epoll_create1(0x0) epoll_create1(0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') [ 489.313274][T32750] skbuff: skb_over_panic: text:ffffffff88581530 len:736 put:72 head:ffff88801b6fa800 data:ffff88801b6fa800 tail:0x2e0 end:0x2c0 dev: [ 489.335108][T32750] ------------[ cut here ]------------ [ 489.340775][T32750] kernel BUG at net/core/skbuff.c:109! [ 489.379165][T32750] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 489.385277][T32750] CPU: 1 PID: 32750 Comm: syz-executor.5 Not tainted 5.11.0-rc5-syzkaller #0 [ 489.394042][T32750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.404096][T32750] RIP: 0010:skb_panic+0x14d/0x150 [ 489.409187][T32750] Code: 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 49 89 e9 b8 00 00 00 00 53 41 55 41 54 41 57 e8 c4 ad df f9 48 83 c4 20 <0f> 0b 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 70 4c 89 cb 4c 89 [ 489.428771][T32750] RSP: 0018:ffffc90016bcf3b0 EFLAGS: 00010282 [ 489.434822][T32750] RAX: 0000000000000088 RBX: ffffffff8acd2100 RCX: 8e1f36514b961a00 [ 489.442780][T32750] RDX: ffffc90013c8f000 RSI: 000000000003ffff RDI: 0000000000040000 [ 489.450734][T32750] RBP: ffff88801b6fa800 R08: ffffffff815fa322 R09: ffffed10173a60b8 [ 489.458687][T32750] R10: ffffed10173a60b8 R11: 0000000000000000 R12: 00000000000002e0 [ 489.466637][T32750] R13: 00000000000002c0 R14: dffffc0000000000 R15: ffff88801b6fa800 [ 489.474587][T32750] FS: 00007f77a0a29700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 489.483494][T32750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 489.490056][T32750] CR2: 00007f77a09e6db8 CR3: 00000000128bf000 CR4: 00000000001506e0 [ 489.498009][T32750] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 489.506740][T32750] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 489.514691][T32750] Call Trace: [ 489.517952][T32750] ? pfkey_send_acquire+0x1930/0x2d10 [ 489.523370][T32750] ? pfkey_send_acquire+0x1930/0x2d10 [ 489.528722][T32750] skb_over_panic+0x25/0x30 [ 489.533205][T32750] ? pfkey_send_acquire+0x1930/0x2d10 [ 489.538563][T32750] skb_put+0x1e0/0x1e0 [ 489.542609][T32750] pfkey_send_acquire+0x1930/0x2d10 [ 489.547786][T32750] km_query+0xd4/0x1b0 [ 489.551884][T32750] xfrm_state_find+0x2d7f/0x4800 [ 489.556806][T32750] xfrm_resolve_and_create_bundle+0x654/0x2cc0 [ 489.562946][T32750] ? xfrm_sk_policy_lookup+0x6d9/0x700 [ 489.568384][T32750] ? xfrm_expand_policies+0x271/0x740 [ 489.573734][T32750] xfrm_lookup_with_ifid+0x27d/0x2220 [ 489.579100][T32750] ? ip_route_output_key_hash+0x1bd/0x260 [ 489.584872][T32750] xfrm_lookup_route+0x38/0x190 [ 489.589700][T32750] udp_sendmsg+0x1b8f/0x2f10 [ 489.594305][T32750] ? ip_skb_dst_mtu+0x580/0x580 [ 489.599134][T32750] ? smack_socket_sendmsg+0x100/0x450 [ 489.604554][T32750] ? inet_sendmsg+0x80/0x310 [ 489.609129][T32750] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 489.614397][T32750] ? inet_send_prepare+0x250/0x250 [ 489.619489][T32750] ____sys_sendmsg+0x519/0x800 [ 489.624271][T32750] ? import_iovec+0xe6/0x120 [ 489.628867][T32750] __sys_sendmmsg+0x453/0x680 [ 489.633531][T32750] ? __might_fault+0xb8/0x110 [ 489.638190][T32750] ? syscall_enter_from_user_mode+0x24/0x190 [ 489.644206][T32750] __x64_sys_sendmmsg+0x9c/0xb0 [ 489.649037][T32750] do_syscall_64+0x2d/0x70 [ 489.653446][T32750] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 489.659371][T32750] RIP: 0033:0x45e219 [ 489.663245][T32750] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 489.682829][T32750] RSP: 002b:00007f77a0a28c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 489.691221][T32750] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 489.699185][T32750] RDX: 000000000800001d RSI: 0000000020007fc0 RDI: 0000000000000003 [ 489.707135][T32750] RBP: 000000000119c070 R08: 0000000000000000 R09: 0000000000000000 [ 489.715095][T32750] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 489.723045][T32750] R13: 00007ffeb904420f R14: 00007f77a0a299c0 R15: 000000000119c034 [ 489.731000][T32750] Modules linked in: [ 489.782058][T32750] ---[ end trace 4eb0a86cd5a9b0ee ]--- [ 489.793867][T32750] RIP: 0010:skb_panic+0x14d/0x150 [ 489.802334][T32750] Code: 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 49 89 e9 b8 00 00 00 00 53 41 55 41 54 41 57 e8 c4 ad df f9 48 83 c4 20 <0f> 0b 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 70 4c 89 cb 4c 89 [ 489.830190][T32750] RSP: 0018:ffffc90016bcf3b0 EFLAGS: 00010282 [ 489.840473][T32750] RAX: 0000000000000088 RBX: ffffffff8acd2100 RCX: 8e1f36514b961a00 [ 489.854668][T32750] RDX: ffffc90013c8f000 RSI: 000000000003ffff RDI: 0000000000040000 [ 489.867228][T32750] RBP: ffff88801b6fa800 R08: ffffffff815fa322 R09: ffffed10173a60b8 [ 489.877634][T32750] R10: ffffed10173a60b8 R11: 0000000000000000 R12: 00000000000002e0 [ 489.886303][T32750] R13: 00000000000002c0 R14: dffffc0000000000 R15: ffff88801b6fa800 [ 489.894672][T32750] FS: 00007f77a0a29700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 489.905516][T32750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 489.912282][T32750] CR2: 00007ffef2fc1a80 CR3: 00000000128bf000 CR4: 00000000001506f0 [ 489.921804][T32750] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 489.931726][T32750] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 489.941497][T32750] Kernel panic - not syncing: Fatal exception [ 489.948345][T32750] Kernel Offset: disabled [ 489.952673][T32750] Rebooting in 86400 seconds..