0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe08b2a4a280930a06000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2333.055909] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2334.347694] Bluetooth: hci0: command 0x1003 tx timeout [ 2334.347745] Bluetooth: hci1: command 0x1003 tx timeout [ 2334.355246] Bluetooth: hci0: sending frame failed (-49) [ 2334.359308] Bluetooth: hci1: sending frame failed (-49) [ 2334.987739] Bluetooth: hci2: command 0x1003 tx timeout [ 2334.993142] Bluetooth: hci2: sending frame failed (-49) [ 2336.427758] Bluetooth: hci0: command 0x1001 tx timeout [ 2336.427764] Bluetooth: hci1: command 0x1001 tx timeout [ 2336.427834] Bluetooth: hci1: sending frame failed (-49) [ 2336.433159] Bluetooth: hci0: sending frame failed (-49) [ 2337.067750] Bluetooth: hci2: command 0x1001 tx timeout [ 2337.073144] Bluetooth: hci2: sending frame failed (-49) [ 2338.507757] Bluetooth: hci0: command 0x1009 tx timeout [ 2338.507764] Bluetooth: hci1: command 0x1009 tx timeout [ 2339.147801] Bluetooth: hci2: command 0x1009 tx timeout 03:55:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x31) 03:55:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 03:55:42 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:55:42 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe09b2a4a280930a06000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:55:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x81, 0x0) ioctl$VT_RELDISP(r1, 0x5605) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 03:55:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) [ 2342.476789] validate_nla: 2 callbacks suppressed [ 2342.476799] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2342.493711] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2342.515936] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2342.598020] Bluetooth: hci0: Frame reassembly failed (-84) [ 2342.598434] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2342.628650] Bluetooth: hci1: Frame reassembly failed (-84) 03:55:42 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:55:42 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe0ab2a4a280930a06000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:55:42 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x30) 03:55:42 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="0054bd00", @ANYRES16=r1, @ANYBLOB="00022bbd7000ffdbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x40) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000000)=0x33) 03:55:42 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x30) [ 2343.116123] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2343.134195] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 03:55:42 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2343.159721] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2343.190719] Bluetooth: hci2: Frame reassembly failed (-84) [ 2344.667953] Bluetooth: hci1: command 0x1003 tx timeout [ 2344.673305] Bluetooth: hci0: command 0x1003 tx timeout [ 2344.673386] Bluetooth: hci1: sending frame failed (-49) [ 2344.679413] Bluetooth: hci0: sending frame failed (-49) [ 2345.227711] Bluetooth: hci2: command 0x1003 tx timeout [ 2345.233128] Bluetooth: hci2: sending frame failed (-49) [ 2346.747770] Bluetooth: hci1: command 0x1001 tx timeout [ 2346.747873] Bluetooth: hci0: command 0x1001 tx timeout [ 2346.753226] Bluetooth: hci1: sending frame failed (-49) [ 2346.763864] Bluetooth: hci0: sending frame failed (-49) [ 2347.307796] Bluetooth: hci2: command 0x1001 tx timeout [ 2347.313344] Bluetooth: hci2: sending frame failed (-49) [ 2348.827851] Bluetooth: hci1: command 0x1009 tx timeout [ 2348.833191] Bluetooth: hci0: command 0x1009 tx timeout [ 2349.387868] Bluetooth: hci2: command 0x1009 tx timeout 03:55:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 03:55:52 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe0bb2a4a280930a06000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:55:52 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:55:52 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x30) 03:55:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000000c0)={0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 03:55:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) [ 2352.745053] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2352.776301] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2352.785127] Bluetooth: hci0: Frame reassembly failed (-84) 03:55:52 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x543, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2352.801440] Bluetooth: hci1: Frame reassembly failed (-84) [ 2352.811353] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2352.814582] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 03:55:52 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe10b2a4a280930a06000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:55:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) [ 2352.947914] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2352.971102] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2352.984550] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:55:53 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:55:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 03:55:53 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe11b2a4a280930a06000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2353.346689] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2353.381891] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2353.391252] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2354.827758] Bluetooth: hci1: command 0x1003 tx timeout [ 2354.833191] Bluetooth: hci0: command 0x1003 tx timeout [ 2354.833246] Bluetooth: hci1: sending frame failed (-49) [ 2354.839138] Bluetooth: hci0: sending frame failed (-49) [ 2356.907720] Bluetooth: hci1: command 0x1001 tx timeout [ 2356.907772] Bluetooth: hci0: command 0x1001 tx timeout [ 2356.918494] Bluetooth: hci1: sending frame failed (-49) [ 2356.923971] Bluetooth: hci0: sending frame failed (-49) [ 2358.987731] Bluetooth: hci1: command 0x1009 tx timeout [ 2358.987737] Bluetooth: hci0: command 0x1009 tx timeout 03:56:02 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x608, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:56:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 03:56:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f0000000240)={0x9, 0x1b, &(0x7f0000000180)="796a757e4b63d9b338a95095ad99b9d0aca7c1188218d96f35c37a15c018332e33411ed07c76c94371a61312e45713b25349612df9b35b31ed5b24b4d918bbc5b3f7b442af606a9c28ab4cad0a29b0028d997647b69ad388f25128412e5a579c201af3f00f78bf", {0x8, 0x0, 0x41416770, 0x7, 0xf5ae, 0x7, 0x7, 0x2}}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x13) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r7, &(0x7f0000002c00)=[{{&(0x7f0000000200)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)='\b', 0x1}], 0x1}}], 0x1, 0xc4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 03:56:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 03:56:02 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe14b2a4a280930a06000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:56:02 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2362.990163] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 03:56:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) [ 2363.035875] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 03:56:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) write$P9_RSTATFS(r2, &(0x7f00000000c0)={0x43, 0x9, 0x2, {0x6, 0x2, 0x7fffffff, 0x1, 0x3ff, 0x3, 0x7c, 0x0, 0x8}}, 0x43) [ 2363.085815] Bluetooth: hci0: Frame reassembly failed (-84) [ 2363.105621] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:56:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 03:56:02 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:56:02 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe25b2a4a280930a06000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2363.225300] Bluetooth: hci1: Frame reassembly failed (-84) [ 2363.226363] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 03:56:03 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:56:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) [ 2363.344813] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2363.367880] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2363.379315] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:56:03 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2365.147746] Bluetooth: hci0: command 0x1003 tx timeout [ 2365.153187] Bluetooth: hci0: sending frame failed (-49) [ 2365.237791] Bluetooth: hci1: command 0x1003 tx timeout [ 2365.244486] Bluetooth: hci1: sending frame failed (-49) [ 2367.227775] Bluetooth: hci0: command 0x1001 tx timeout [ 2367.233203] Bluetooth: hci0: sending frame failed (-49) [ 2367.307726] Bluetooth: hci1: command 0x1001 tx timeout [ 2367.313182] Bluetooth: hci1: sending frame failed (-49) [ 2369.307723] Bluetooth: hci0: command 0x1009 tx timeout [ 2369.387779] Bluetooth: hci1: command 0x1009 tx timeout 03:56:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 03:56:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 03:56:12 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe35b2a4a280930a06000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:56:12 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:56:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) getsockname$netlink(r4, &(0x7f0000000180), &(0x7f00000001c0)=0xc) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f00000000c0)={0x1, 0x150, 0x400, 0x8, 0x8, 0x2, 0x8, 0x3, 0x9, 0x10001, 0x401, 0x3}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x49002}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x28000000}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000006680)={&(0x7f00000065c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006640)={&(0x7f0000006600)={0x28, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0xc040) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x7, r9, 0x8}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x7, r12, 0x8}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000003880)={'batadv_slave_0\x00', r12}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000003980)={&(0x7f0000000200), 0xc, &(0x7f0000003940)={&(0x7f00000038c0)={0x78, r6, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) [ 2373.193757] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2373.234458] Bluetooth: hci0: Frame reassembly failed (-84) [ 2373.234726] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2373.246241] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2373.259183] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:56:13 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:56:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 03:56:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 03:56:13 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe52b2a4a280930a06000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2373.849300] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2373.880098] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 03:56:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 03:56:13 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe80, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2373.893327] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2373.900180] Bluetooth: hci1: sending frame failed (-49) [ 2373.907013] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 03:56:13 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe53b2a4a280930a06000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:56:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) [ 2374.004592] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2374.030208] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2374.043836] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2375.317907] Bluetooth: hci2: command 0x1003 tx timeout [ 2375.323339] Bluetooth: hci2: sending frame failed (-49) [ 2375.328919] Bluetooth: hci0: command 0x1003 tx timeout [ 2375.334423] Bluetooth: hci0: sending frame failed (-49) [ 2375.947723] Bluetooth: hci1: command 0x1003 tx timeout [ 2375.953294] Bluetooth: hci1: sending frame failed (-49) [ 2377.388071] Bluetooth: hci0: command 0x1001 tx timeout [ 2377.393456] Bluetooth: hci2: command 0x1001 tx timeout [ 2377.393501] Bluetooth: hci0: sending frame failed (-49) [ 2377.399442] Bluetooth: hci2: sending frame failed (-49) [ 2378.027767] Bluetooth: hci1: command 0x1001 tx timeout [ 2378.033201] Bluetooth: hci1: sending frame failed (-49) [ 2379.467840] Bluetooth: hci0: command 0x1009 tx timeout [ 2379.468078] Bluetooth: hci2: command 0x1009 tx timeout [ 2380.107747] Bluetooth: hci1: command 0x1009 tx timeout 03:56:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 03:56:23 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:56:23 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930306000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:56:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 03:56:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) statx(r2, &(0x7f0000000100)='./file0\x00', 0x2002, 0x8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000002400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000023c0)={&(0x7f00000046c0)=ANY=[@ANYBLOB="782100003b0000042abd7000fbdbdf250e00000008008500", @ANYRES32=0x0, @ANYBLOB="94dd0ef80792609a12099a3665275b833f961ff4ce6631ed573fe4363d9b0f374b8dec7ab52224425cfd95c6c7e695034b7be156a20a24b2116f0246b2753e09110a48cff627ee6c35feeed4521f093aaec520f662013811c734b5a9443c204eb2da1d8b058c509676beae063cbe9703464ee332a61feeda0419a94f1aad2dd3d11e8af6d83c9c850aaab5319988ed7648fab119f37f9aa3775e84eb8254743670676c9e8f81f0677170b8f68a1b2039cb2f6d6f5c6f33f4b9e6604a9940359cba9e5746bd2485a840b2ff813a57ada977da499ec8fe436dc2ed24f56d3d82897bcd5640d915878041b10bd9d6b54175ced73591569a542f859a1a5cb82b5706877440854970d1f7309896c20e52e965aa3c63146904a6ed72c6d89ad52f350a879c48e79a9dff6fab82501463caa5bfc4f5107fbf615ec79748fee9482c1872c9f3949add13d4abf38fe0ef27397f16c666e3427f1dc6dac43f99930b11ec81416af0fbcb644d5383d4510e80ce0e1402a722990ec3abcac6c48e65a4f2f6865b4b51a7f1bfdd0d7e23854ad965e53131b8556fb7df30b1ca5e38b3aac6e40435dcefbf7327f6ce419f73c1a5f10a27df864ab56ff229847337e8b7ab7fe53a60fc69308fc01e9d8371fd2a0a1acaa9e657eb04b3ae6fb85100987ccf8a7f0efd8b8b4062611b247238d37d8249288814d2016992dea0e36d664bc348b4988808ceecdff86054adc6b6b971125c2955a28f503c33a630cba15a69c17b9dba479ccf4a9c6c0522f05266b31c3cd87f74175faaa861da0883cadfefe996bb3b161fba930701ccfe26b96ad3f9926e52248f253d850a2a100025a8c200830448781d58c77d5589b7fd3fec9b1cd3a230e150a89cde520a4983901ee48043010559a1ef22d8bb330507c85b8b554b3af641023da1f3b21671ef7c816a38c0176ef63c7a874b97a64c65b0b9338bd2b30092c955d351c1ac39be02f648b8fec540bc01fc115041c0889f43223d257643822c88432e0f4f7d9b22b72cc017d838ed9bc8714dc4415033796306313204bd01c808aea47ebffc049383f62356d2f78099f0817091ea82461154255dd5df68ed63b7753e494e2c540e94270152b148f9e4f3fad50e60b84f717ea0dba41828463121e56d139bb072e5dd765c215abf61fb426ea084bde95a4935d6b8c59ed7300aee554be9a155fc83c0d4c68b25e974d999d0ab86f5dc224199bc6ad1536d6af2b4816c3082fb772ac31887714c09acb77d988f367c5279f405e133474be9c1c94fb26ee2391afa9d4fc645d38163acbf3496d87f0686c1657e5d7192723f2e355d20bc07695d8010a5494d3f9cbe3541fdba519eb60effbd925405c8860cda436424961f13ed8b4f64d287e2186ccadd77daea20cf2d8b1a463d77997cbd691f531de005a47201fed89bb9dbf8e9c136a4f86e18a6b6ca4532f7b7c947dc1e5f1f3b36e0831407b9493ddd0954c4a34e6020a5cd096dcad87f91520c6d7cf2df3bdfff89bcd071a071171dab2e983743bdac25cf74b6d5e51db1f4de6b824776ce44d732625dcdc8af8099007a365f38d8db344449f603c23a7a45d8e84e3f1769ea0cde2d26a8c39b027de56e0db406c1ff1ed935a5ebc9907735c449cc7dc4172841f11184d644d4f5cbc90287ffe184e2b96fae3741b30723bfd842d3883ce5721be2a91787e70d405df596bab84b8d249e1191215abffd416620e1cc9f86e99998a3a8ff9290dc76d448ca8b667c3287fc515219f553abf027d21c0eaecc1b19cd9c36411c079bb07537b1ebb4a69adb6877acf0d7b2b70c268b8ff97c8b8c784a2fc4e074cd3c7aafb58e8799205c308b78a10cb34bdc8662544cd6f12c928f30f54ba590810540a82a445b18ba5189a440d9f04ad4a6a24a22682f6040f1622be5cc794958db4107c6d5eb1b37f73fd5c2b4a96f21ee0c567868689a17ae162483709e0497ea3bccf721e13232113ff86d977c97266477a7960eb53fd6ec2f12b989a88bc93fec998f83abc7c033b7acfeda6ccd0b1a8cbb69a03391ee36d0cb5ac4aabb0287ceafe4c1b6ad220d90f811bfcc5820a37811b16201ad6ccdfa54200d084b1ed884b2b22a8e841d1f79d014f622f498710fbe20318b54b52ea069356c4db74519f1c4a936c9cee263f398d323f7a79b650d42e777df2011c656e3d2d52c017dfc044bc24ac53a7945dd16003ec49d0721414335c269cafe44f2509f662c5b181d63697ac116b468067daf0023d6bfd6bf7cda25e7ae7b6bd8328e49b2dbee23705f7e430b2a650538607bd29b97be7b4f920b4fa3f44b3a722e1f59d6bb63b95ecc15ab3d0cb6fb3853e42ef13b7684283c473a7313c16e1210c8b43d091c083e8122d52e45f8fd8312ff86705e8da97b33ca0412cb2195040ae90f5ca7347c8cb48d35a0006c6ac96b141550c86df57ccda7973300ce160c1a6f2637678ff423205d80be17086f6cebd389c6f8d1db950d48fc7ea7529b45606be199cc67c88d3cd8c1a7316dd998e710186cad00bf68d9c9067dbf06b3547fd642eaabdeb5dcc302d9a2302bae35646874f330ecffbf62252d8fea4b2413de81bf00d054797ef68a0dc028e5fc854144a3b85b7f0708453585896fe3d081d31ae54140de5b8634b48b109b54154741aa3b3a8a8da62f96eb0e3c87b5f27d838f40b21064fbf6fe489ad63c14a76bfea6c0658a063f40c02062822e38498a68492fd381bd7bc5d1668c958bce12f7b751a1a487dec3aa88a48b058f85ea60aff7cbffb9b768eb83faa0ef2e0319d4d9cc9db8ccc92389e32df69d3b171a81edef85b3555f583048c4c8796533df56048706a2ce8ef46bcbb66b35feedf49e7ea45d3151c210c82e9ccca746678653f25f454d66d8815548a679f5391fa3a96341d5c328af888d18be8abd2ae113444d90950e43cc812dee7464da4f9df8a88a84757c3e4ec48372154fbb14076a9ee4f277e2f469c6883c16bc9915de139dee76b1f06fa099f8cdee6b4e575246c31aa73ddde8db4368c91c2c6b31ac1b6c2a137f673b088aab7b5936d37601facf9483ce045018853d3a330a03a13a599abc9d0cedc1a224a2a93be17836973ec63a686c0593577cf89ff64e3a11f7a7448600037d93ab4e2229cbb0b56b95be4bdb819363be3506fbf6d29d943b697647f433a3591b8527ef9e8e6a0253374f6e651be0c02ad98894788338dc3ad345f01eb9c510bfd7cd758ea0e5b12efc71069d0515bcbffa3e449333af98c9db6c903c01bbed82e36536e27d477961a3e80fbe79929d301d2b5534aff18b8b41ee2db373c8fd9d37f0a28a6e337ce3be09e47c134b6e4d1ae3d1cc6e94f70eaf4dca09c68c4449bcf60361febeed06ee76faae07e35ef12e0972c2d36c2a540ba6c6995c91e9bc9db7066aa3be5c97e0e27fd49f07af533ac7ecd0a8e9201e9b15d85054839f59c9967cc848f333e89ebf9adf5f56686cc8ab69d72ec5515c061912e020aaace3eedeb0ac2b07ea8f263fe9eec13a8e0b39dae50e3707376b5d1341da1b34a3c7ba2c044390a9d9a9e2d475eeb5982d605bc5e80f0010993b9cc2b8b794ee617da69f59fb0418c3ab4ccbfc41c05e4dee8281551a1aa67537195c20fd6905ce7327e5c13e3323dd9ce2af465ddab988b6a56d4863d91a83917b24d6fe442de7fc894e741afc2957bf6b97f3b5ba16968c92a3bb58f6a4316ad75c8789da459c305ee3126e9916da5f94033f294f14f31ccb123faadaf3f80daa98da3c83ca0b0e7abc22314d91960c684ff4572f6ad5b53dcba57bcf7e0ef98f886c04491b46fd18be39022064fd288939f9cbc83778081f52d39284e10811fc3bae119050c60905c17958437d1da3a3ca33b91efd93882757a7cdd9963997ab9269fc6e28769695e4553f440a7e39652ca8c5a92084bc4df766384e934a14027d9112fba25ad084fd6e24f17947317a63fc21249982b9f99f3e4f4a3f29bb529151fd443ef1f83ca5ab21cad0110af56437a291cdc3047a23dc94dbc85e46122aa3790034d50dde940bd7cedb6ebae0ea89f1df0458c1841dc6f752d8632b045bb6ac7acad56e5908325b3ea8d32edbdefa8d9e9705976fa376451d31dfb5cc254040e53c96d78202f4bcf154549bf6ba5654ce20fb2939cff0d222d81cd8fa9603681f2c080da5e05614ae4b61cc027405804fb76960e1e98ba8961872ad765443c0580c8134ff23b3d15172e8f787f7eab5f4ee42f51378834cc46ed2284a6963904b07b9313f2ec24a8b352d19792a6708041d7cb15e82b5fe286529194f3e7dfd49497a4e52c9bfae2c817ce8d49c5cf1e555e4ae24bb5680e943d54e4b8c431ccbd17d7097aa4c695634cf50fa3b801337d3492bd321b3e228023b6f1e373f53d634947e307e676c3db571411a871958112e9531d3c6a40ce868160b7c99a21de04182fe60de19ca101683b0f6019c770bc7b858f0ae224d02b3dfed8afbdb64926c0b2c7d31e2a969facec26512821afa6ef23c44ca65cdd774e5d0c0ccb89a81b61d8477aee9ecfb7a978870ee4bbd7fb6b89ab060394cb8e0b538298afde0c6ece8c843f45724be717807b0b57e92d44b294d463ecd8ec5497f938f62336d8000fdbcb135a9d0de5a7a3a783fc092fa21bdf7fce5a991c8992fbda2e62eb0244a1b956f9784d662268eb253480a4634c1529aa0265c44903592782483aded41306c14e4f546191a06e679187e4661195f59a5c83f77250090cc7ae36438ee3bad69de102860f8eda73ba09cc6fde9745bf0e27597b7b50087ca73beac9a14fb6cfe192f42ea96862f99916e78bac6b762fa7c9d9e2d64093ad1d64148ffe1b5fcc0f5fd9bcfec1d13bed552c29d6d315671855059c5bd71c740e0ec098b834fd07cd0d050a233a9452fc6ba49be989fd977a2a13da53bc55ea59ce3269bc587542411a2e3bc77f58c0e901724179b77cb83586bba3a74569d26442cf1f663ce6a22ab4f3bfbbfe219e5764de6b6028d7b29368ca207cca9fb3375d07ba7e0bf032e62d752f957dd2a663131a7667e688daafd7efb3f1befd4d3040796086253b6f651bd54f7aeb6782c1a6f0e39a2dc8425808d68420a87ec2f31e27c0f9269d29099d38a8a035b2ea945a44a6d3c0cb85fc860c627895e17c18adf19c34732eeaa43ab3546e3367c6f9f101b9d0478098f7a0804dfd4d95c7ee41db295869835d39226ea088498d98acc11c15b36b4fe289316b17ef8ee5882dc0d921574a2c6d4a204b7c50273e3085b6806629db2e4014f97755c8a9cc051ab5f5c679ed921d8d880bb08b651490e9c9e809da68d40ad14c0c530be2ad479988cf288a90882f800894d63a36f24608c56af0cf1d2c1a66676b409d234c7eaa542058038b8abffa0e5768f02474183a3631b382696779edfc3109fb13792638fbc2f882d6a5156eef1d61ffe8c67dc84ba8528ddad7c033d908be2bdf8360bbc7da37bb9a2d940d7b5373920650127a770a30f0ab426ca8d7e7c1b539c8aeb4b2cd3fb9186284dce5fe59c89afecca14d3e95ff80885884b690879d618c9f59422be09de34e51e73704e1df9dbc0d596636413aee5f2da9cd19e0f091464536d304ab097e41edd38bc77a96ba02af91ea30a7b8ad093a84a39bb6dc5893e56c707031a5d09b0fe3091820ce3b93651c02419231f01d49d7677ad1f12f0232050e59e6152a24e35aaaf90b14dd1e8a9cb5a2960ba007a07485a4e0bd56aaf054c95e2335bc24e9277b618e8b318638ea5ef009e2011304da1de8bb25461edde67cafee1c07bba8940c37f87943e46237ab404008f0014003880080029000700000008001c001fce6014c48e18aef634aa58a5ed3738ce40ab87ea6841059ad81b8f739b2a43f9505582c25d6720c6c1e95ba28aab8cd78fefd663d1cc7794ec52f9858b48936979c26cd88e1bfc67697141d600bab0605126a8d1b98427f44979833444dfbdeb91c847c2fd383e9f3b5b921ed4615774669ca90d1f4eca237959417609c727d4f09f437a8ed05f8a132440ad71fe81f7c0aac48661d569b99d3d1351c5205f36f66f5bc3b0143a95c039127ff4deadedcbf54af6f1db95", @ANYRES32=r3, @ANYBLOB="b3aeffd6469f61b62f4f45e464a25b61e5635a65acdcb258a5e60af2b81373f77d81768cae265ca16a37bdaaf8b89e86bc5043e63efee301078361b5d8386751ae787bd6547f7f9ea342f9d610848056e53f371b6f72b9a0bc55d566c4607f32b8eb7af0321140d41651cbe14c5b2e88a0a654c5b75e709e0280d41c0b0020507fb8730b6d52f77fe540c49d29ed13a28473690fed02569f7742ea08cd5ce641049e6f8a7de768a46f0129cf4905f33db269b7dfaf6d3c7dd382f1ef32100cceba9bfb3f02b881a2bbb8ee369e07825d7e8dc182ef5e236b5fb5336cf54308bf4b249f3cda135b3f1946abc24cb280290c8be093784c7bc0bcb5752016a3ea9d8cf23a08ab56d4b9f92fb13c66d1821eae665b0161081e1504bea3311ae315d2bda60db1635b227daba34b040a2a42af3ef42309d7ccb42f0de49e1246239b6cb1f44d7688c2985f5a3301c6405cf956b76d378dff26ec833b77850c9b55536b31a615ce7fd4866886af2f7138627088461d3ee8207cc2d8b9352e039dc4059928ca9f7368c1d9fa6f95291e55c76de6dabd0f3a12706d5489963ef52fabf9f65cbbc52a33072676a14ce061807b7cf83127bebf6f1b49bb47bd36d37fd9b7410f9b138339d9cdf77d4d8a3949811be23969a048d4e4ecdd65094b66edb7f03675e21b6672f0fd437d8f02d54a80f55d2038030606d8f51cbbd4cfec85cb3a156852ae5b474c177bb9ab5e38c842ee6039409e437e5c40cc01c95704b6f11b47f58b12b3a494ae2849d0cf70aad7e8f8ee561d05d47bdef18a8d2cede582ff3b2d41b040fc6a1e184f3f0a6adce62427cb34e41e21650e4b0e590a4866a11329a5fc519c305b87d1e696dd32e84daef8513c98cde1f2cb03eafc3bde979403dac004c837a1bf037e28fd1b6c0281c50c1d8a8078accf138873ea6b7e9ed5651128d49a771db77800bb22c1452aa102df3693d6359ceda8e2cb76b2a4c2ffad35e3ac17f0d1b0f0600c129f832fad6257e76460cae1aa78cf785269963a69d19b9aac740e9bcc63d11d29a77453005975a9dff10968c99075856798d03231c2f9fb90c280ed6e7d641de4a319f27909ec7e1f325ec883caebfdaa9a9148d511a8fc357fa0fcfffffb84f0fff60b394f9ad5b70e0212c7000ddd7d3cc4b4b397331d8d92f81830bbf8373650799f65ac0bc60ed4298d782adbcdc55f210dc684b019053c9075f61f077bc0967119e9c0c18f00fdb2a54e708b908ac7f716fe206c9f5eedfc28046f76a735014609da4442cfe30e9f0355ef1063c70f62909ded76006a00093a452f6ebc75b0acda972c1c7f60629a9d093ab377412e5d9a7e0c34864b62550923552e91fbe8eb073288f4532295386d9388a9953b163c4734478b2287d8c88cbba5e764a170bf5da84fac58aae6877f0820ed675c1ed7204df7b5306f0a25118f3f31c165c9184bae29f321ba4f329b3729c52254b823f2aaba198892a36c38957b473888e4e41264b74a129c7e5484e8dd6405d056edadfb6fc57cf01e81f20f0b7d9ddf528745a910b76c209399d10d4d76cc0623d544da7b145e75691b75a5f3e3862cfd2863fc27bef1b849baecb5c220d0d3c44c633531b64da2b4a1465377ba5b5ffb72cffef60ec2bd63c27707f5fa04d423e6c80815728380230a09216d3e4f6d32ec48b4c4b8aae589216e49903dc7c6bd174dedc0d119d0fd92f525db2149557317ab48765d711f184347d4273f2accd980800b0c48f91b5936f77012b1a6b1a718be0c416415a2ff84989f4418d2d01f0f95c3b97880f321043ef709dc0f29a14978232d2e4906a4a712b9710ba8740a8b18f9e40da039ab21e28b9736d7c1d8e7d05502a27de85c8516b064f39aa21e1e4de4ff52f687ab1920e8b9fa8dac44aaee077019a56ef9874a828590e536b084b807a30c482fa181074e716b5b701f164e4ec7fa3490d4319f3f90f18d21bd46fd74a423f3705845baecb14710d0c9d085b2d0066d5ca4c769466154379824af256632149b55b57cf333ff2c30544dc34b7514dc8158a9b18334fc3a03af8e40b3cd65debee776ff188d500cfe5e38d7000eaf4fd21682a2e166b06bac114c8915cbb516bc5e1b4147b64bcf752b12e35ac54ddc2b07bb5c8be6817578b61337b6ab8341ce15ab3acac70d008e827cfaa6c1e038d9e38ebf0e79ab801e3d873cc78458b379ab5badca68e70307905f11bda1ed3730357118b46b352d71eefe1f1b17e0252956b1e940bb98c9950b627cc69d9058fddd0e2a2240d52156ac8465f8e5bda088af930b168ab346f6ae4ffb33e2fbc5c697623cb9311393c0139312c008674f8cd8fc0cc71a87c9797105cfaab5bfb7c071c4dd2d9750b61766bd77ccf5784df68cdd96d774c4fe348a1f6959351e9f342fee868940aacc33532a929dc78a7251eb731e567617836601d7f23cdb8b569707a262b5daae21dfc2ab9b0c31c5fdf187b8c9f558200ccba7831c880bd977d4202193483db050a39912dbeb6f37d05c4f12c47ef925d1e3aaa35ceb7b642e2757371a835a05d5c74b9acae86792f909d67584e4e99bf5d5925432853ee2c9d292efa282f2a812d0e010df1ccae9e753896b6988c61cdcde1807bc2c5c7bf5c829db4a8885d46a99b51af73f8016114c1fe24d212b1de54bf8f5fc89251306a62c56a6c488955cba013a68f418ef9bfe71b944c85067eb5598fa6467c2abe538e95d13bc2c0e216c989052b3aa08b63e6c8be4c6e792de635c11ab7f3d0e1dbbf01328185c05a934e40fd871fd4166ced5b1f6d5fbab053c536978e064c1be03261c135ee768a5a42347d567e0fe7ec6f04c5d4f6621bef1a993314edd373359964f221057ad58a4ef57a883ba1f254fcada14c64769e1a5f15c5e51ff4bb929050195f87b33298071ea5729505a23159d574fa8d4670334ff229ad998b765108c7857ea95554706221c69fd3a549e28eed33758cec11d3ee3c36aa469a615ee0ee6f7500a3c9593f250bd68af9e4a0b7464a512968562ed16afc1b81fb9eff4dadef1c7ccac3b22d234bc80e1d98db201da210eab8b9cec1912f709e24f20d1708a6db0fe7dd8d953b7167b48e7d53bead29ece54f5a32cce1457f0440305944d96ae259b08e98ae7c109913cde96cc4efb29b2cca3fc5884df43ba6dc208fe30126a27e88f6b19d0652a8148b44d960032e42ee6b1e217a9f3f28a2697bff08acd79f59f1d3825af216026c62a2ebf372c2696d555e1e2c459b1dea25954a5bb10265570139c35cf84f925db729da49c24580c10ff9a2a57642732b5a6f12ab8000c2956f546c6df9b2fcb9e95a9edc8556eb00ba120ef893fa475d7b228bf49811b74091e65b650beafdadc3a036500d365f075db1f40364e3c38cdddc5a2438ee800176c4dae87e098284b18c2c56a5fc3db62c182ce7704b9fa63aaac1fa1a45d13b6be5b7dfdf92fc2f3c9a3a93cd91334cdda5cf1e00fe372f73eafff16345b23a3bf8f5847c654d707564f24779ab8da438153e17fe44a2fa54285c323f5c0b148285dfd92ecd45baa09c07ab875dbbb8ed4e4041334cdec2c2dec36f413ef103c071d7ba7fca79c92ddd62b7c6f9361877d8194365ba09d34e4e51fd26045839c7f8ac6f29ccbae2009282a57b1e621017650f09f48655ee69a76c3c1b0823f74b5a3be722ccb0730336de177154f724b14e7f05a11e90c03d1ef3f3ceb66c55e6346104632c25e954c7fb35b5e4763ddeac45713ae10af269563086695cce0249f5b912b8d788d93f0f363f99236bc671ba14dd021b930dfb1284e3ec24a5830aac8a5eae101f44f01d39af2d8fd2bd5d4fc3e41689e996909b8b290332a1d70626d4e419e77931041492363bb46f1a905aca508087e7391f64b2a03686185867ea426153b652b0832f5879e44036c3de41577108af5b7abcada31042525d93967ad37bb29b015d40269d60892e24405e034ec90ffedeb9f987123c22a942f697008685640eddc7bcbb0341bfc12112699d70ea6355738712808593cc2d9cfb16d8f2155c9c9ad12343176f5a5de69f157cd4db264b7f29ff024f8aff10aef90833a9711ba37b0363290276b62823b1b3f460a69f81165b7e9f23ac482b4b7767a1f93db0dd3eb22c339002cbea1dddfbec9b3f552c02d34841bac6405bc8cb2aee181e800ed58c6899ef1a4ac7355fa519952e58e57d8a678c01c1b0e4d06493a8b4cfdf1427bd36c6eb885f524a0f98fa3a49d7ed74470d6e38cb24bbb5e5ef6b43385a131ca8c53bcb689c743c447094d1b2acf36c8d6b451962bfb58ba2a986212713f4ce8814e74170b1859f2b496588e479f9ca7548401800a63b5850394397cb2e4d6f442efbce8bd7a04d7b0bd51874da16f921f008ed429dbae5a3a83966afa7a90024232a3c0ce177d68a39571a25623b6f6dbfe6a258ae5b51b700ed2754959004ad0761ca0674252926d111871f3b1576c941c516387b1e51ebba50638a634a7326ee01349ecaaa3b52ec76abfdc406bba869987fbb1affe1693837d3be0c15af161a16692c1b37807a1999e3c92d20df129b5c8dadc0b72d1b94061df85a8edec25252b1c7b62712af10e919ffa0ea069103774d54e52d6483f5420ce32160b6a35643adc1fe8082379ff4484553fd1117bb5a2fa78d420746e0faf37fd2cc385c9a94e446f28262d8f26d7a37b0fd8b6f23900054b3535ca5522e49a2cbf32ade89ea7643c51555e8baf3a4185305868eb8d19c0511fff8b5654e367c3b2cd77c514872c182d47eb3f50fba6f4f0323bcc1d63a8e6f4f1b7cf51cd2ccc06398af945d573b76c29bbfba5fb62743745a0e24199decafc72bc02757a6fb1e08ed33745506c5f9ac30cb792b4ac6dfe6d185a7639500bc5795522bde8c088a6ee7eeeb70f7da08f18ef6e60d02fa098b3fae186991584cca2088bdc30aff6ca834423badc343c5f478d11004acbd7960da5d61860ef9e2f1ae8a511a26daccef9c32c4a38a193f02fb60609081521f2443fee50109ee2db75bad15b802d854297989a19a647a7ec291ac5076194c655056afd8ac66953bc2e70681b72d594bd8aac2260f286fa6fd62f59f8c782180304a384cc2b5ab0f8afb4553fe3c0e2b6fae5bca743a38794e44695a3700e36f97aa32c16aab32771e77183a1636ce641d9b38a41346ec040e7a54d28e015cb68ae8d0efac5e0d76cf22c503422ad474b2b878f9e2a5759cfd4237954fcc7102173add4c61979480df4fd8f4efcae27fe00b04bfe370768892d1dea935f3fe43e9dc97d58dc9a6256ab89fe40d51a88a1e28370fd260158d65e0f1aa34d24614e361760741e64e5227d02321739f1007ec87c85ea624d9942e548b010d07ead1888805cb445e9519207c2398445e8d77be3a5e155e3d2525ae217546f9713ff9234c14d62f3835319bde35a27e7e63cb3412a9028a742ccc4e7207ef9ba6de335279be4973540d8d1b7158379c7f998236e3907bea84a43b91b28b399c43800b4c7759a5ea2bc77a708525644db6e3afa7e444d7a5b1adb4e9e77985b45de7cbff7cbec8b4680a4f60a3cc732c20cd4fe16972bb65e01312dcb7edc8a76a7de9fb31614a95f7b77595a2a785dbbbf79dd9938c25bf232a68ff9344e8bf5f19f593acdcdaea61dfc5941fd6eb8c02c461dc9960e52cc94078b11a62ff9a34951cd41c4c509dcf1fdcb9261859512ff04f0216d5cb0e17dfea82e3595e6c3a7ef6e9723f2be3a6d131397070699d159249b9676376c31e6796a8175220ab3e5808a76c52b7b6a679ff5636df3841f8edd82d6577b2a9630e29aa7cfe3a5f3bf7d4a591843f1184672e7ad8d312067663bddf853e61d39c9300887be1f8c8fe9ecdc635d89180c006c004d0d000000000000ce5ab7d9a2c33f657ccf14e4aed60abe06920a30da9c066c192bde1241ef7a2563358eb4db10d8a19a6356100ffae0e121bdbf4a595ed9856fbe584de7105ba0f0cee96bf2b9f480c54f6d0e1aa38e017cd5b1f7db32780dc40e021d675de3ff8e264ecd8c95f5abd890d432a401f9b862db51a6eb947c54d063f06035c0d2ee0cb5815c2220789ef533762a298bf3a6be849295eaa5f01ee2212ac6a3f74130829b66d8b698c16513cf1406943c24f380b6f8243b86630ee6c2527cc33dfe057e1104008800000000007ec45d54082c068a5c38cac04264756665d08244b26ceaafe508d0c75b1b47c6dcaf599ac582c5f96466851cf5429e16"], 0x2178}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 03:56:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) [ 2383.518845] Bluetooth: hci0: Frame reassembly failed (-84) [ 2383.530782] Bluetooth: hci0: Frame reassembly failed (-84) [ 2383.537194] Bluetooth: hci0: Frame reassembly failed (-84) [ 2383.559278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pig=9432 comm=syz-executor.1 [ 2383.585710] Bluetooth: hci2: Frame reassembly failed (-84) 03:56:23 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930406000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:56:23 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2900, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:56:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 03:56:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x100200, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r3 = accept4(r1, &(0x7f00000000c0)=@ax25={{0x3, @bcast}, [@rose, @remote, @null, @netrom, @netrom, @remote, @rose]}, &(0x7f0000000200)=0x80, 0x0) getsockname$ax25(r3, &(0x7f0000000180)={{0x3, @netrom}, [@remote, @remote, @bcast, @default, @bcast, @netrom, @remote, @netrom]}, &(0x7f0000000140)=0x48) 03:56:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 03:56:23 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930506000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2384.147224] Bluetooth: hci1: Frame reassembly failed (-84) [ 2384.153245] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2385.547802] Bluetooth: hci0: command 0x1003 tx timeout [ 2385.553274] Bluetooth: hci0: sending frame failed (-49) [ 2385.627754] Bluetooth: hci2: command 0x1003 tx timeout [ 2385.633214] Bluetooth: hci2: sending frame failed (-49) [ 2386.187755] Bluetooth: hci1: command 0x1003 tx timeout [ 2386.193172] Bluetooth: hci1: sending frame failed (-49) [ 2387.627759] Bluetooth: hci0: command 0x1001 tx timeout [ 2387.633204] Bluetooth: hci0: sending frame failed (-49) [ 2387.707755] Bluetooth: hci2: command 0x1001 tx timeout [ 2387.713191] Bluetooth: hci2: sending frame failed (-49) [ 2388.267777] Bluetooth: hci1: command 0x1001 tx timeout [ 2388.273188] Bluetooth: hci1: sending frame failed (-49) [ 2389.707801] Bluetooth: hci0: command 0x1009 tx timeout [ 2389.787817] Bluetooth: hci2: command 0x1009 tx timeout [ 2390.347796] Bluetooth: hci1: command 0x1009 tx timeout 03:56:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 03:56:33 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b00, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:56:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 03:56:33 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930f06000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:56:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10500, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0xd, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r4, 0x7, 0x1f}, 0x8) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) [ 2393.720228] Bluetooth: hci0: Frame reassembly failed (-84) [ 2393.731183] Bluetooth: hci0: Frame reassembly failed (-84) [ 2393.752078] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2393.752578] Bluetooth: hci2: Frame reassembly failed (-84) 03:56:33 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:56:33 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280931106000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2393.767296] Bluetooth: hci2: Frame reassembly failed (-84) [ 2393.774852] Bluetooth: hci3: Frame reassembly failed (-84) [ 2393.775545] Bluetooth: hci3: Frame reassembly failed (-84) 03:56:33 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:56:33 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280931406000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:56:33 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3580, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:56:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 03:56:33 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280931506000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2395.787728] Bluetooth: hci3: command 0x1003 tx timeout [ 2395.787858] Bluetooth: hci2: command 0x1003 tx timeout [ 2395.793158] Bluetooth: hci3: sending frame failed (-49) [ 2395.798704] Bluetooth: hci2: sending frame failed (-49) [ 2395.809779] Bluetooth: hci0: command 0x1003 tx timeout [ 2395.815394] Bluetooth: hci0: sending frame failed (-49) [ 2396.427735] Bluetooth: hci1: command 0x1003 tx timeout [ 2396.433361] Bluetooth: hci1: sending frame failed (-49) [ 2397.867870] Bluetooth: hci3: command 0x1001 tx timeout [ 2397.867913] Bluetooth: hci0: command 0x1001 tx timeout [ 2397.879130] Bluetooth: hci3: sending frame failed (-49) [ 2397.884781] Bluetooth: hci0: sending frame failed (-49) [ 2397.890465] Bluetooth: hci2: command 0x1001 tx timeout [ 2397.896530] Bluetooth: hci2: sending frame failed (-49) [ 2398.507771] Bluetooth: hci1: command 0x1001 tx timeout [ 2398.514860] Bluetooth: hci1: sending frame failed (-49) [ 2399.947900] Bluetooth: hci2: command 0x1009 tx timeout [ 2399.953622] Bluetooth: hci0: command 0x1009 tx timeout [ 2399.960530] Bluetooth: hci3: command 0x1009 tx timeout [ 2400.587845] Bluetooth: hci1: command 0x1009 tx timeout 03:56:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 03:56:43 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:56:43 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280932506000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:56:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000100)=0x13) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 03:56:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 03:56:43 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:56:43 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280935206000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2404.003222] Bluetooth: hci0: Frame reassembly failed (-84) 03:56:43 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:56:43 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280935306000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2404.057318] Bluetooth: hci2: Frame reassembly failed (-84) [ 2404.064610] Bluetooth: hci2: Frame reassembly failed (-84) [ 2404.078720] Bluetooth: hci3: Frame reassembly failed (-84) [ 2404.083626] Bluetooth: hci3: Frame reassembly failed (-84) 03:56:43 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:56:44 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a02000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:56:44 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2404.544921] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2404.554927] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2404.563311] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2406.027736] Bluetooth: hci0: command 0x1003 tx timeout [ 2406.033342] Bluetooth: hci0: sending frame failed (-49) [ 2406.107710] Bluetooth: hci3: command 0x1003 tx timeout [ 2406.113169] Bluetooth: hci2: command 0x1003 tx timeout [ 2406.113212] Bluetooth: hci3: sending frame failed (-49) [ 2406.124417] Bluetooth: hci2: sending frame failed (-49) [ 2408.107838] Bluetooth: hci0: command 0x1001 tx timeout [ 2408.129128] Bluetooth: hci0: sending frame failed (-49) [ 2408.187808] Bluetooth: hci2: command 0x1001 tx timeout [ 2408.194098] Bluetooth: hci3: command 0x1001 tx timeout [ 2408.194189] Bluetooth: hci2: sending frame failed (-49) [ 2408.206802] Bluetooth: hci3: sending frame failed (-49) [ 2410.187814] Bluetooth: hci0: command 0x1009 tx timeout [ 2410.267731] Bluetooth: hci3: command 0x1009 tx timeout [ 2410.273224] Bluetooth: hci2: command 0x1009 tx timeout 03:56:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x2, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000240)={'macsec0\x00', {0x2, 0x4e20, @multicast2}}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(ecb-serpent-sse2)\x00'}, 0x58) 03:56:53 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:56:53 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a05000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:56:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x800, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x2, &(0x7f0000000300)=[{&(0x7f0000000180)="d0849a6334043303517dd647ad1a533e651eb24d5ede1ba83572bedde891885ce3d0d4ff6f9d0056da896605009624289dc1ce91df6efbb33f7d91da11904c87004403bc966eeb6649ae5d430ca2716f1613e784e75d591ccb7a28fae5433994ad8c6e8aa74b3cb48ebeec46f946e59b6f4ca1c677f02b988ae28b8fdb83bb10c6ba83715011671c708e8e34214858a5d068eca509f90a343abad1c5c44c0eab18cca80a7ad1cf1e8d94fdfc7a991862a95e03618d512ebb776e7ecfbff68966ae71c88fd3aed2636922962137f84f982b80f7419c64e7b726a5f19008107f51064ca90b", 0xe4}, {&(0x7f0000000280)="5e1c1f61f17500fa0273e585684a6897401467f0ecd9e5f83f183d5357c6a500862cce17664d635693f9f1b4c91c105c802a59f97e45dba20d6c48af2147afb18d40d1ec85124108be5264dc0b0d77963fd1240b85aff3ad1c5bd776dbcf99432160daaafc83e7", 0x67}], 0x8001, &(0x7f0000000480)=ANY=[@ANYBLOB='nojoliet,check=relaxed,map=acorn,iocharset=cp864,utf8,nojoliet,sbsector=0x0000000000000009,smackfstransmute=(system)self,@vboxnet1/posix_acl_access,fsmagic=0x00000000000001ff,uid<', @ANYRESDEC=r4, @ANYBLOB='.fsmagic=9x0010000000G00e4\x00\x00\x00\x00)]\x00\x00']) syz_open_pts(r1, 0x2400) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 03:56:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 03:56:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2414.162896] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2414.187924] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2414.199825] Bluetooth: hci0: sending frame failed (-49) [ 2414.225853] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2414.232556] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 03:56:54 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2414.275877] CBQ: class 80160000 has bad quantum==14, repaired. 03:56:54 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a09000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:56:54 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2414.463431] Bluetooth: hci1: Frame reassembly failed (-84) [ 2414.463877] Bluetooth: hci1: Frame reassembly failed (-84) [ 2414.483454] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2414.496966] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2414.502076] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 03:56:54 executing program 3: [ 2414.511519] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2414.514107] Bluetooth: hci2: Frame reassembly failed (-84) 03:56:54 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0b000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2414.579525] QAT: Invalid ioctl 03:56:54 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6488, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2414.687529] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2414.714502] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2414.724418] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2416.267713] Bluetooth: hci0: command 0x1003 tx timeout [ 2416.273336] Bluetooth: hci0: sending frame failed (-49) [ 2416.507741] Bluetooth: hci1: command 0x1003 tx timeout [ 2416.513250] Bluetooth: hci1: sending frame failed (-49) [ 2416.587874] Bluetooth: hci2: command 0x1003 tx timeout [ 2416.593707] Bluetooth: hci2: sending frame failed (-49) [ 2418.357765] Bluetooth: hci0: command 0x1001 tx timeout [ 2418.363244] Bluetooth: hci0: sending frame failed (-49) [ 2418.587803] Bluetooth: hci1: command 0x1001 tx timeout [ 2418.594212] Bluetooth: hci1: sending frame failed (-49) [ 2418.667792] Bluetooth: hci2: command 0x1001 tx timeout [ 2418.673217] Bluetooth: hci2: sending frame failed (-49) [ 2420.427773] Bluetooth: hci0: command 0x1009 tx timeout [ 2420.667771] Bluetooth: hci1: command 0x1009 tx timeout [ 2420.747900] Bluetooth: hci2: command 0x1009 tx timeout 03:57:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x3, 0x0, 0x0, 'queue0\x00'}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000300)) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000240)={0x9c0000, 0x5d86, 0x100, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9b0972, 0x5d, [], @p_u8=&(0x7f00000001c0)=0x4}}) write$P9_RLINK(r4, &(0x7f00000002c0)={0x7, 0x47, 0xfffc}, 0x7) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000000)='syz1\x00') ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000180)={0x1, 0x100, 0x4, {0x7, 0x3, 0x7ff, 0xfffffffc}}) r5 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xa67c) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x74, 0x0, &(0x7f0000000440)=[@register_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x1, 0x2, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/39, 0x27, 0x0, 0x31}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}}, &(0x7f0000000400)={0x0, 0x20, 0x48}}}, @free_buffer={0x40086303, r5}, @clear_death={0x400c630f, 0x2}, @clear_death], 0x3b, 0x0, &(0x7f00000004c0)="330d421ef06e3d6ea6538602e163dafd173023f0f21f157a60c05e2f76bc8fbd55fdff3fdc0e26a43c9e94ee29684eb203125e1c437c7bf0d6c7f9"}) 03:57:04 executing program 3: 03:57:04 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:57:04 executing program 3: 03:57:04 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a11000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:57:04 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:57:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 03:57:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x30) 03:57:04 executing program 3: [ 2425.039690] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 03:57:04 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:57:04 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a14000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2425.099600] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2425.120444] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2425.131142] Bluetooth: hci2: Frame reassembly failed (-84) [ 2425.131183] Bluetooth: hci2: Frame reassembly failed (-84) 03:57:04 executing program 3: [ 2425.233416] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2425.248606] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2425.258857] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2426.507826] Bluetooth: hci0: command 0x1003 tx timeout [ 2426.515114] Bluetooth: hci0: sending frame failed (-49) [ 2427.147729] Bluetooth: hci2: command 0x1003 tx timeout [ 2427.153333] Bluetooth: hci2: sending frame failed (-49) [ 2427.158832] Bluetooth: hci1: command 0x1003 tx timeout [ 2427.164226] Bluetooth: hci1: sending frame failed (-49) [ 2428.587815] Bluetooth: hci0: command 0x1001 tx timeout [ 2428.593253] Bluetooth: hci0: sending frame failed (-49) [ 2429.227807] Bluetooth: hci1: command 0x1001 tx timeout [ 2429.233648] Bluetooth: hci2: command 0x1001 tx timeout [ 2429.233743] Bluetooth: hci1: sending frame failed (-49) [ 2429.244964] Bluetooth: hci2: sending frame failed (-49) [ 2430.667867] Bluetooth: hci0: command 0x1009 tx timeout [ 2431.317811] Bluetooth: hci2: command 0x1009 tx timeout [ 2431.323607] Bluetooth: hci1: command 0x1009 tx timeout 03:57:14 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:57:14 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a35000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:57:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0xc800, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x80000000, 0x8b5, &(0x7f0000000200)="42f4a41be14b3fa8a8dac392f52d2191dd1918e0b2fb1f63c6c281b1f1a6b2e99cd61dc148278e3bb0c4dd3187d2894cbb64ce8cb8c8f75cb16353d370502ceab9b1d31c3d1762f19eb631dcc3f582abaa330b47cb77c40c84f5a3e6812c2265094f086936813386bb460fc67e69fc0da97e839567449acd9c14ff7ba1fa35f9f3b81aa78cabeb7b63cfc467642e9f0179f8e6a57976503ff23086c2acaa821a3aa766ca6dc5ce9449c38fc4bcb6649fe85a3ee8e33599bb06aa06f70e126b90e9", &(0x7f0000000300)="9c", 0xc1, 0x1}) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x10e, 0xfb, 0x6c, 0x20, 0x3f}, 0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 03:57:14 executing program 3: [ 2434.626277] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2434.635573] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 03:57:14 executing program 3: [ 2434.667897] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:57:14 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2434.716485] Bluetooth: hci0: Frame reassembly failed (-84) [ 2434.723564] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 03:57:14 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a52000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:57:14 executing program 3: 03:57:14 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:57:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x30) 03:57:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x1c, r1, 0x31905e13403123b7, 0x4070bd2c, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x4040841) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x7, r3, 0x8}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x5c, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3418}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x5c}}, 0x45) socketpair(0x1f, 0x80001, 0xdb, &(0x7f0000000180)={0xffffffffffffffff}) connect$rose(r4, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r5 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r6 = dup2(r5, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r6, &(0x7f0000000280)={0x11e}, 0x269) ioctl$KDADDIO(r6, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 03:57:15 executing program 3: [ 2435.273801] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2435.311186] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 03:57:15 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2435.351517] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:57:15 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a53000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2435.525610] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2435.534584] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2435.543107] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2436.747776] Bluetooth: hci0: command 0x1003 tx timeout [ 2436.753211] Bluetooth: hci0: sending frame failed (-49) [ 2437.387787] Bluetooth: hci1: command 0x1003 tx timeout [ 2437.393260] Bluetooth: hci1: sending frame failed (-49) [ 2438.827773] Bluetooth: hci0: command 0x1001 tx timeout [ 2438.833292] Bluetooth: hci0: sending frame failed (-49) [ 2439.467744] Bluetooth: hci1: command 0x1001 tx timeout [ 2439.473156] Bluetooth: hci1: sending frame failed (-49) [ 2440.907823] Bluetooth: hci0: command 0x1009 tx timeout [ 2441.547991] Bluetooth: hci1: command 0x1009 tx timeout 03:57:24 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:57:24 executing program 3: 03:57:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x400000, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$netlink(r3, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x1000000}, 0xc) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x4100, 0x0) bind$unix(r4, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000180)={0xe256ea98786d5608, 0xfffffff8, 0x2, r0, 0x0, &(0x7f0000000140)={0x9909d2, 0x5, [], @string=&(0x7f0000000100)=0x7}}) 03:57:24 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000644306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:57:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f00000000c0)={0x3, 0x1, 0xda}) 03:57:24 executing program 3: [ 2444.883999] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2444.919429] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2444.926862] Bluetooth: hci0: Frame reassembly failed (-84) 03:57:24 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2444.940773] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2444.952890] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2444.965984] Bluetooth: hci2: Frame reassembly failed (-84) [ 2444.971976] Bluetooth: hci2: Frame reassembly failed (-84) [ 2444.978267] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 03:57:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x30) 03:57:25 executing program 3: 03:57:25 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06020000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:57:25 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:57:25 executing program 3: 03:57:25 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2445.498080] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2445.505946] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2445.515682] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:57:25 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06030000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2445.617332] Bluetooth: hci1: Frame reassembly failed (-84) [ 2445.674875] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2445.698208] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2445.707079] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2446.997779] Bluetooth: hci2: command 0x1003 tx timeout [ 2447.003285] Bluetooth: hci2: sending frame failed (-49) [ 2447.008796] Bluetooth: hci0: command 0x1003 tx timeout [ 2447.014222] Bluetooth: hci0: sending frame failed (-49) [ 2447.627807] Bluetooth: hci1: command 0x1003 tx timeout [ 2447.633326] Bluetooth: hci1: sending frame failed (-49) [ 2449.067745] Bluetooth: hci0: command 0x1001 tx timeout [ 2449.068401] Bluetooth: hci2: command 0x1001 tx timeout [ 2449.073161] Bluetooth: hci0: sending frame failed (-49) [ 2449.089075] Bluetooth: hci2: sending frame failed (-49) [ 2449.707834] Bluetooth: hci1: command 0x1001 tx timeout [ 2449.713300] Bluetooth: hci1: sending frame failed (-49) [ 2451.147762] Bluetooth: hci2: command 0x1009 tx timeout [ 2451.153210] Bluetooth: hci0: command 0x1009 tx timeout [ 2451.787825] Bluetooth: hci1: command 0x1009 tx timeout 03:57:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0xd, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={r4, 0x6, 0xce2}, 0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 03:57:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = gettid() ptrace(0x10, r1) ptrace$peekuser(0x3, r1, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvfrom$ax25(r2, &(0x7f00000000c0)=""/4096, 0x1000, 0x1, 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 03:57:34 executing program 3: 03:57:34 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:57:34 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06040000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2455.166757] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2455.193679] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2455.206194] Bluetooth: hci0: Frame reassembly failed (-84) [ 2455.213630] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2455.225506] Bluetooth: hci2: Frame reassembly failed (-84) [ 2455.245523] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2455.253347] Bluetooth: hci2: Frame reassembly failed (-84) [ 2455.272655] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 03:57:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 03:57:35 executing program 3: 03:57:35 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:57:35 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06050000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:57:35 executing program 3: [ 2455.756241] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2455.777943] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 03:57:35 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2455.798476] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:57:35 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06060000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2455.850725] Bluetooth: hci1: Frame reassembly failed (-84) [ 2455.958551] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2455.974869] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2455.984681] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2457.227826] Bluetooth: hci0: command 0x1003 tx timeout [ 2457.236244] Bluetooth: hci0: sending frame failed (-49) [ 2457.243090] Bluetooth: hci2: command 0x1003 tx timeout [ 2457.250034] Bluetooth: hci2: sending frame failed (-49) [ 2457.867755] Bluetooth: hci1: command 0x1003 tx timeout [ 2457.873635] Bluetooth: hci1: sending frame failed (-49) [ 2459.307841] Bluetooth: hci2: command 0x1001 tx timeout [ 2459.315472] Bluetooth: hci0: command 0x1001 tx timeout [ 2459.316747] Bluetooth: hci2: sending frame failed (-49) [ 2459.321784] Bluetooth: hci0: sending frame failed (-49) [ 2459.947769] Bluetooth: hci1: command 0x1001 tx timeout [ 2459.953616] Bluetooth: hci1: sending frame failed (-49) [ 2461.387808] Bluetooth: hci0: command 0x1009 tx timeout [ 2461.387825] Bluetooth: hci2: command 0x1009 tx timeout [ 2462.037961] Bluetooth: hci1: command 0x1009 tx timeout 03:57:45 executing program 3: 03:57:45 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:57:45 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06070000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:57:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000000c0)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r6 = getegid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={r4, r5, r6}, 0xc) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) dup2(r7, r8) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 03:57:45 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2465.393978] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2465.429200] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2465.459327] Bluetooth: hci0: Frame reassembly failed (-84) [ 2465.459363] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2465.465204] Bluetooth: hci0: Frame reassembly failed (-84) [ 2465.483572] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:57:45 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a060a0000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:57:45 executing program 3: 03:57:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 03:57:45 executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0xfff9}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r7, r6) r8 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r9 = dup2(r8, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r9, &(0x7f0000000280)={0x11e}, 0x269) sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xbc, 0xb, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, [], 0x3d}}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'geneve0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x584}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1}]}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x8000) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000200)={{0x2, r2, r3, r5, r6, 0x1, 0x2}, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r10, 0x400455c8, 0x4) ioctl$TIOCSETD(r10, 0x5412, &(0x7f0000000000)=0x33) 03:57:45 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8060000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:57:45 executing program 3: [ 2465.999268] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2466.017789] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2466.033164] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:57:45 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:57:45 executing program 3: 03:57:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 03:57:45 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a060c0000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2466.071495] Bluetooth: hci1: Frame reassembly failed (-84) [ 2466.200956] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2466.218294] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2466.235341] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2466.248215] Bluetooth: hci2: Frame reassembly failed (-84) [ 2466.259115] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2467.477738] Bluetooth: hci0: command 0x1003 tx timeout [ 2467.483469] Bluetooth: hci0: sending frame failed (-49) [ 2468.107688] Bluetooth: hci1: command 0x1003 tx timeout [ 2468.113212] Bluetooth: hci1: sending frame failed (-49) [ 2468.267690] Bluetooth: hci2: command 0x1003 tx timeout [ 2468.273178] Bluetooth: hci2: sending frame failed (-49) [ 2469.547799] Bluetooth: hci0: command 0x1001 tx timeout [ 2469.554758] Bluetooth: hci0: sending frame failed (-49) [ 2470.187772] Bluetooth: hci1: command 0x1001 tx timeout [ 2470.190477] Bluetooth: hci1: sending frame failed (-49) [ 2470.347755] Bluetooth: hci2: command 0x1001 tx timeout [ 2470.353265] Bluetooth: hci2: sending frame failed (-49) [ 2471.627783] Bluetooth: hci0: command 0x1009 tx timeout [ 2472.267829] Bluetooth: hci1: command 0x1009 tx timeout [ 2472.427788] Bluetooth: hci2: command 0x1009 tx timeout 03:57:55 executing program 3: 03:57:55 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:57:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x2, 0x4, 0x8}}, 0x14) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000002c0)={0x40, "ca4aa0283c0dc73180fab35772b35f5739191b51a98efc2845ed2cad1939616d42f58269c5789eff42d2ca85c8561132ea9517f1afc4ecb1f1b519a5e2992f7104a53fc305b6ff9cf8af86a320a29e4b123f87c57c7370eb886124ccfe7d826197977aa619f4b225bdd7323bce9c4131d561b6e76b5d9135183d3d7a359b1a21ea65cb212e8b362b520a88548c8370e193a880f12c3cdd1a172b45e30e3b6181ee805c34d07775b8856bf45ce0fc4e173562e3fd36b408c2ce675f2d18bc07910cd5b204810cec367bca6c8ba75e52ee1e55244d9328fb41d4ff8ea713e617f38c809bb5f7f622401ba48cc458a8f908e04921cbd1291dbb46eec4784772274e2ed65deee1a855e269b95e129a92451e6c2cfd7ad7b85764dec4f9e6603db100f8abb48d70c04202daeb704213c7c10c39420c35b5690e331456175c36e31e71ea0e4b05415750e6f9f8bec768c4b02923092be8a77a29098e03955b1731e9a3579656895d599cf83aa9b78f9492d2867860f976f39c725f5e59428724cece83b7b2a6e79ec6e607ed14ad14936a27ca38b8796788c62426a6b121ed4c40f413491db3e77e5f796dfc9492d9d94fcbebe65e4ff4d88eefb5a745b4d12098cd3ae36fa1c5843dc0a60d4e09dbc8ab21bc5b153b811499012ce920ad51dbf293609a6396ecca7f5eab27a175c887c7c1d139d8a1e39aae8c57184fba00a0015844"}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) mkdirat$cgroup(r3, &(0x7f0000000100)='syz1\x00', 0x1ff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) [ 2475.628272] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2475.634435] Bluetooth: hci0: Frame reassembly failed (-84) 03:57:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 03:57:55 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a060e0000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:57:55 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:57:55 executing program 3: 03:57:55 executing program 3: 03:57:55 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2476.235749] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2476.247269] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2476.271951] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2476.300546] Bluetooth: hci1: Frame reassembly failed (-84) 03:57:56 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a060f0000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2476.444368] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2476.453433] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2476.461511] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:57:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0x1, 0x1, 0x9, 0x6, 0x7f, "b612d939eba932a61056e8d5cb5115a49d3902", 0x7, 0xb32}) 03:57:56 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:57:56 executing program 3: 03:57:56 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06100000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2476.882621] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2476.924814] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2476.937498] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2476.947849] Bluetooth: hci2: sending frame failed (-49) [ 2476.959379] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2477.707802] Bluetooth: hci0: command 0x1003 tx timeout [ 2477.713203] Bluetooth: hci0: sending frame failed (-49) [ 2478.347793] Bluetooth: hci1: command 0x1003 tx timeout [ 2478.353197] Bluetooth: hci1: sending frame failed (-49) [ 2478.997796] Bluetooth: hci2: command 0x1003 tx timeout [ 2479.003209] Bluetooth: hci2: sending frame failed (-49) [ 2479.787730] Bluetooth: hci0: command 0x1001 tx timeout [ 2479.793213] Bluetooth: hci0: sending frame failed (-49) [ 2480.427780] Bluetooth: hci1: command 0x1001 tx timeout [ 2480.433305] Bluetooth: hci1: sending frame failed (-49) [ 2481.077903] Bluetooth: hci2: command 0x1001 tx timeout [ 2481.083317] Bluetooth: hci2: sending frame failed (-49) [ 2481.867740] Bluetooth: hci0: command 0x1009 tx timeout [ 2482.507751] Bluetooth: hci1: command 0x1009 tx timeout [ 2483.147858] Bluetooth: hci2: command 0x1009 tx timeout 03:58:05 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:58:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 03:58:06 executing program 3: 03:58:06 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06480000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:58:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCNXCL(r2, 0x540d) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x890) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 03:58:06 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2486.463285] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2486.472821] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 03:58:06 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2486.517221] Bluetooth: hci0: Frame reassembly failed (-84) [ 2486.518896] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2486.533924] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2486.542150] Bluetooth: hci1: Frame reassembly failed (-84) 03:58:06 executing program 3: [ 2486.566900] Bluetooth: hci1: Frame reassembly failed (-84) [ 2486.573688] Bluetooth: hci1: Frame reassembly failed (-84) 03:58:06 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000028c0)=""/1722, 0x6ba) getdents(r0, &(0x7f0000000180)=""/228, 0xe4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 03:58:06 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a064c0000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:58:06 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:58:06 executing program 3: 03:58:06 executing program 3: [ 2487.163034] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2487.193725] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2487.209969] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2487.269003] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2487.269172] Bluetooth: hci2: Frame reassembly failed (-84) [ 2488.587717] Bluetooth: hci1: command 0x1003 tx timeout [ 2488.593161] Bluetooth: hci0: command 0x1003 tx timeout [ 2488.593193] Bluetooth: hci1: sending frame failed (-49) [ 2488.604594] Bluetooth: hci0: sending frame failed (-49) [ 2489.307717] Bluetooth: hci2: command 0x1003 tx timeout [ 2489.313219] Bluetooth: hci2: sending frame failed (-49) [ 2490.667758] Bluetooth: hci0: command 0x1001 tx timeout [ 2490.673140] Bluetooth: hci1: command 0x1001 tx timeout [ 2490.673203] Bluetooth: hci0: sending frame failed (-49) [ 2490.684011] Bluetooth: hci1: sending frame failed (-49) [ 2491.387791] Bluetooth: hci2: command 0x1001 tx timeout [ 2491.393209] Bluetooth: hci2: sending frame failed (-49) [ 2492.747746] Bluetooth: hci0: command 0x1009 tx timeout [ 2492.747770] Bluetooth: hci1: command 0x1009 tx timeout [ 2493.467752] Bluetooth: hci2: command 0x1009 tx timeout 03:58:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 03:58:16 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:58:16 executing program 3: 03:58:16 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06600000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:58:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x16) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000180)=0x0) sched_setattr(r4, &(0x7f00000001c0)={0x38, 0x5, 0x10000014, 0xd9e, 0x100, 0x8e, 0xfff, 0x6, 0x1f, 0x100}, 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r6, r7, &(0x7f0000000040), 0xa80b) r8 = dup2(r5, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r8, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000200)=0x7) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) [ 2496.764690] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2496.794031] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2496.794109] Bluetooth: hci0: Frame reassembly failed (-84) 03:58:16 executing program 3: 03:58:16 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2496.813006] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2496.818653] Bluetooth: hci1: Frame reassembly failed (-84) [ 2496.820904] Bluetooth: hci1: Frame reassembly failed (-84) [ 2496.852640] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:58:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x2, 0x7, 0x0, 0x400000000000000}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) finit_module(0xffffffffffffffff, &(0x7f00000001c0)='nodev+\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) pipe(0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000200)={{0x1f, 0x59}, {0x6, 0x98}, 0x9, 0x7, 0x1}) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) 03:58:17 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:58:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x33) 03:58:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06680000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:58:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a066c0000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2497.345358] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2497.353226] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2497.361351] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2497.504026] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2497.522045] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2497.530585] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2497.535208] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2497.544131] Bluetooth: hci2: Frame reassembly failed (-84) [ 2498.827753] Bluetooth: hci1: command 0x1003 tx timeout [ 2498.833246] Bluetooth: hci1: sending frame failed (-49) [ 2498.838831] Bluetooth: hci0: command 0x1003 tx timeout [ 2498.844395] Bluetooth: hci0: sending frame failed (-49) [ 2499.547756] Bluetooth: hci2: command 0x1003 tx timeout [ 2499.553218] Bluetooth: hci2: sending frame failed (-49) [ 2500.907787] Bluetooth: hci0: command 0x1001 tx timeout [ 2500.913149] Bluetooth: hci1: command 0x1001 tx timeout [ 2500.913191] Bluetooth: hci0: sending frame failed (-49) [ 2500.919580] Bluetooth: hci1: sending frame failed (-49) [ 2501.627758] Bluetooth: hci2: command 0x1001 tx timeout [ 2501.633162] Bluetooth: hci2: sending frame failed (-49) [ 2502.987758] Bluetooth: hci0: command 0x1009 tx timeout [ 2502.987764] Bluetooth: hci1: command 0x1009 tx timeout [ 2503.717808] Bluetooth: hci2: command 0x1009 tx timeout 03:58:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 03:58:26 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:58:26 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06740000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:58:26 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1d, &(0x7f0000000080)={@empty}, 0x14) 03:58:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0xd, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r4, &(0x7f0000000100)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x9, 0x8004, 0x2, 0xca7c, r5}, 0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) [ 2506.963096] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2506.981212] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 03:58:26 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2507.021218] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2507.022643] Bluetooth: hci0: Frame reassembly failed (-84) [ 2507.035285] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 03:58:26 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a067a0000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2507.071025] Bluetooth: hci1: Frame reassembly failed (-84) [ 2507.081516] Bluetooth: hci1: Frame reassembly failed (-84) 03:58:26 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e0000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:58:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) fremovexattr(0xffffffffffffffff, &(0x7f0000000280)=@known='trusted.overlay.redirect\x00') mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) [ 2507.129402] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2507.140657] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2507.150529] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:58:27 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06f00000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:58:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x400000000000000}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) uselib(0x0) memfd_create(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000640)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000000)=0x275) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001d00)=ANY=[@ANYBLOB="62726f75746500000000000000000003000000000000000000000090880000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100030000000000498be40bbe19ae35397f13e9474d2627c63b8f88405ac4b0f3293b8a3bb7e621a67e53d1ef46d06c5dc6b047e968abfbe66aefcf8bffb8fb3f577faa475e6666af27fc9074a760caa5c75c2899975595f48c66f329008956e662f5978650cc130ac6e7d349a9699c47282f415f08ed77633a7c02d66e78903478954944e89f789995ad26483601736bd2336a98814260bfb22500000000000000000000000000000000520fd5b356d424ad4836c2b62ffa18f23127c6986066fd9292def7405fad80b99a7033cd6404a45f0fa2efb77ca8b5b02598c6668b9b76b2a00628137ba4a71f97cac25f466f7deb17c8ece1efb4d8dacfa70c88234635b669c2f672836dedad792e5cef1a6ecc02a50145e17101db2b9fc354ced2483f2524f0057d48d9dabf429d4727da6b1acd2fe7", @ANYRES64=0x0, @ANYBLOB="000000000000000400000023e4654fd8239380c6b6c6d2f72cbf9be5e436205d767389518d37ddd53c3f134934033e13df33e290d36b7671ea2580fe702a52b268c9b4674b7b3be6ece9a6da6b910a740aa88bf8aad105c3cef5f7c564d17aaf90a32f70124a5c3d8be8582d"], 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = syz_open_dev$mouse(0x0, 0x0, 0x400) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000340)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x2040c1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r1, r2, 0x0) dup2(r4, r3) ioctl$PPPIOCATTACH(r4, 0x4004743d, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:58:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 2507.581748] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2507.593069] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2507.685061] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2507.685631] Bluetooth: hci2: Frame reassembly failed (-84) [ 2509.077784] Bluetooth: hci0: command 0x1003 tx timeout [ 2509.083183] Bluetooth: hci0: sending frame failed (-49) [ 2509.147712] Bluetooth: hci1: command 0x1003 tx timeout [ 2509.154385] Bluetooth: hci1: sending frame failed (-49) [ 2509.707777] Bluetooth: hci2: command 0x1003 tx timeout [ 2509.713177] Bluetooth: hci2: sending frame failed (-49) [ 2511.147731] Bluetooth: hci0: command 0x1001 tx timeout [ 2511.153175] Bluetooth: hci0: sending frame failed (-49) [ 2511.227915] Bluetooth: hci1: command 0x1001 tx timeout [ 2511.233364] Bluetooth: hci1: sending frame failed (-49) [ 2511.787761] Bluetooth: hci2: command 0x1001 tx timeout [ 2511.793313] Bluetooth: hci2: sending frame failed (-49) [ 2513.227747] Bluetooth: hci0: command 0x1009 tx timeout [ 2513.318480] Bluetooth: hci1: command 0x1009 tx timeout [ 2513.867742] Bluetooth: hci2: command 0x1009 tx timeout 03:58:36 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06fc0000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:58:36 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80350000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:58:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000180)="d38100ffe6002b452b7b4f0a7ff32588", 0x10, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r2, r3, r2}, &(0x7f0000000500)=""/83, 0xfffffef6, 0x0) 03:58:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f00000000c0)) 03:58:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000f3ff950000030000000000000086a0ef063f58e57c4f3c163bbfe9e67ef9d59029fd336949c2aba9c74e66b880084c4bdc9d0654d67f0094d26a9eacb2ae39233f04941f0de3ff93ab889ac2e26dee3436872155ce0c710cdaeeff0f0000a4667f3616195c7312002048bf8f117b014e35b249a3ca000c81d6ddd903a3083406d3746b10dd8184a31d3cc4c07ada5c3e09f8f1adca6fcec858ce4d3a0f71ff49c44b002b09838ed3f00f85f9aadf857c9ddd4fc597b504446837cb4c6b751f6bd320ab4313188efd042ebd9de054d8491bb2b34a76cd38fad707eb570b8ffa4aded2ceb14797e4ff14d18316005fcd5f42b695a3aef3a55cf873b59eb4c31793d3dc74d1376e5c6dc8be4ec2bc40bb2a145cd8109dc4a87892cb506db46be225d7f450640e6c62733ae7402b9c405d2356adc6ede27076371d2fec75e68b814cf1cee942d2415f6cf826b0a3f643bca3152d6233063a3e6422872582115b492c4d451b363aeba857ccfcb52a8b421c2ad679c305dc16b17165929ec0f583d618fa60feec8d7c34c85ad9aeb8b74286952ad83806b6063baf98967d37ca55c62f66ece2c689d0977d610100377bea00000000000000000000d405670e2c732e9835bc3831c3c6d74845fec84c5fdb85a1701de3f0a80c1f3754c7b844860c31021b0df2442505756c8202d84961148e1171285917bd4d55362f44ed98deccfa1196a3e051315da4715a610318f053b299ee88c862d7b53da6ad29de64287b701cf31b63fa0bdd5cb529433cc4a31f18235c8d89da48fda5130551c327dd39197ae1e62ba3a4dcf9107e138e00f87afcee3a64ef5c04e05fd1e8c27047354d7e239b015ebed3e56e94371d4bc5756d7920b227cd6373feddf7717d9f960fc66c0b09306fa00d492def7ec437ddf70d039f7f95549132267eb21f5989dd772781be1a7ac8eea65e2e4b9f3653b50b6c870c7f9c4eba35b1c53fd46240964c0cf0eef189e78ef270fe7ddf0482408b4329fe79c6365520859cf35dbc3e1fe032285683bce6cd7ac015accbc309c1039254f551af91c1cfaf6b0faaf305a3b82f00000000054648895130088ea079346942fce447fadc300310835f72b8b334cfd7b57844c8f901e975ead2077185dfbe9722f4e269e3ea0c81c4b0c970a9055fbaaec09f7491f9cb6eb9f70d860dc89284571b25d0057e52f41117b4d673899642d886b3d9ed33e3b8dcc140a4e1b44daa26b764196767b81fdccf1e5d413e4f1312ecef8dbc65dd26a5a8ea96d1dfcf0fcdfc5c1f48340000000000000000b0db20460ca6819fb4bc21ba641ad654f3121c785d67faba0ef51ea19fd1df56a659c30197fb578d5d16dc05eba25210061019bbc3dc2d096e98f4bd0f7f02e684561c281e39eb73a8448a6b12890b92d730abb2040d0127f45413a6afdd5977ceb52314de95806046895ba5a64552fd540a2f50ea44104c692b37d8914f732f040bcac0085e61d398c76df5519da80e9829736b056c659f9d1582209e704bb725c2715036c0f52f916636d0ccad2bd5b106de0ba6180e3f4c49774a1e787bafec7d8ba5c4e6c80d49f917b239673b01ac4c75b27e30ec0d150c27dbc106732914be71033a993ea80f"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe72}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="b7", 0x100000}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)='Z', 0x100000}], 0x1}}], 0x729, 0x0) 03:58:36 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06d00100a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:58:36 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2517.202086] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2517.209880] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2517.367265] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2517.368704] Bluetooth: hci0: Frame reassembly failed (-84) [ 2517.421038] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 03:58:37 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:58:37 executing program 3: semget(0x2, 0x3, 0x341) 03:58:37 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000300a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2517.489351] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2517.609404] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2517.618238] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2517.626466] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:58:37 executing program 3: r0 = semget(0x1, 0x0, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000004600)=""/36) 03:58:37 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:58:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2800, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x28001, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x800d) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d16, &(0x7f0000000140)=0xa) ioctl$KDADDIO(r0, 0x400455c8, 0x4) sync() r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) socket$caif_seqpacket(0x25, 0x5, 0x0) eventfd2(0x61f, 0x0) 03:58:37 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000500a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:58:37 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x60) flistxattr(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(r3, 0x9) [ 2517.826947] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2517.844500] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2517.863092] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2519.387837] Bluetooth: hci0: command 0x1003 tx timeout [ 2519.393210] Bluetooth: hci0: sending frame failed (-49) [ 2521.467888] Bluetooth: hci0: command 0x1001 tx timeout [ 2521.473337] Bluetooth: hci0: sending frame failed (-49) [ 2523.547891] Bluetooth: hci0: command 0x1009 tx timeout 03:58:47 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000600a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:58:47 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:58:47 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x1) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000003c0)) 03:58:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000180)={0x8, 0xffff, 0x1ff, 0xffffffc1}, 0x10) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x9}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3c) r4 = eventfd2(0x1000, 0x80001) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={r3, 0x0, 0x0, r4}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 03:58:47 executing program 5: r0 = eventfd(0x0) writev(r0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) r1 = gettid() write$cgroup_type(r0, &(0x7f0000000300)='threaded\x00', 0x9) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) close(r0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 03:58:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) membarrier(0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000010901010000000000000000020000060900010073797a300000000008000340000000090800034000000c76080005400000000f1c4d845f2431bbc71717b3d87b9c1b2f7a0a381605876f07980d8d1b6cfc07b02fedd4ac7344cc9c9845fe293abc354dda86f9b76a9844e81fefb945b31fed47df7b9b1fa7ac54888c58b652f3c464942f79c2e103a4e99b354e43bc836cca42e51d7d2f47dcd8335da67960d65446f0056cae05ba05cabd426b43a2dd09447efd155f8dfc677d9be0e2f40d9541e1da0afccaeb7bc33a37a93a573ea128da"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40810) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000240)={0xd, 0xffff}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ocfs2_control\x00', 0x80400, 0x0) accept4$vsock_stream(r5, &(0x7f00000003c0)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80800) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x7, r6, 0x8}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wireguard0\x00', r6}) r8 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast1, @in6=@dev={0xfe, 0x80, [], 0x18}, 0x4e24, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x0, 0x3a, r7, r8}, {0x6, 0x2, 0x9, 0x5, 0x1ff, 0x1, 0x7, 0x3}, {0x3f, 0x101, 0x401}, 0x8fe, 0x6e6bb5, 0x1, 0x0, 0x2}, {{@in=@broadcast, 0x4d5, 0x2b}, 0xa, @in=@loopback, 0x3500, 0x4, 0x3, 0x0, 0x3, 0xffffffff}}, 0xe8) 03:58:47 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2527.447810] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2527.476054] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2527.488729] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2527.519182] Bluetooth: hci0: Frame reassembly failed (-84) [ 2527.529407] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2527.554532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pig=10995 comm=syz-executor.1 03:58:47 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000700a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:58:47 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 03:58:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x111102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 03:58:47 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:58:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000640)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet(0x2, 0x100000000003, 0x400000000001) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080), 0x0) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f0000000000)=0x275) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, 0x0, 0x0) mmap(&(0x7f000001c000/0x1000)=nil, 0x1000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x544e000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000340)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000000900)=""/4096) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000400), 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r8, r7) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = dup3(r9, r10, 0x0) dup2(r12, r11) ioctl$PPPIOCATTACH(r12, 0x4004743d, &(0x7f0000000100)=0x3) r13 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_UCAS_MAP(r13, 0x4018ae50, 0x0) [ 2527.712013] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2527.748624] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 03:58:47 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2527.787922] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:58:47 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06d40800a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:58:47 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:58:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 03:58:47 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89ffffff, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2528.016131] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2528.053055] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2529.547834] Bluetooth: hci0: command 0x1003 tx timeout [ 2529.553384] Bluetooth: hci0: sending frame failed (-49) [ 2531.627741] Bluetooth: hci0: command 0x1001 tx timeout [ 2531.633160] Bluetooth: hci0: sending frame failed (-49) [ 2533.707806] Bluetooth: hci0: command 0x1009 tx timeout 03:58:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x9, 0x0) recvfrom$phonet(r1, &(0x7f00000001c0)=""/185, 0xb9, 0x10002, &(0x7f0000000280)={0x23, 0xff, 0x6, 0x40}, 0x10) r2 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TCGETA(r4, 0x5405, &(0x7f00000000c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000140)={0x0, @adiantum}) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 03:58:57 executing program 5: r0 = getpid() r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x6, 0x80000) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x8, &(0x7f00000004c0)=""/239) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, r4) r5 = add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$restrict_keyring(0x1d, r5, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000001d40)='/dev/nbd#\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) r8 = socket$caif_stream(0x25, 0x1, 0x1) kcmp(r7, r0, 0x6, r2, r8) open(&(0x7f0000000080)='./file0\x00', 0x404040, 0x0) writev(r6, &(0x7f0000001300)=[{&(0x7f0000000200)="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", 0x2ae}], 0x1) rt_tgsigqueueinfo(0x0, r0, 0x7, &(0x7f00000005c0)={0x0, 0x5, 0x401}) 03:58:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x101, 0x0, 0x10001, 0x9}) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000180)={0x6, r2, 0x0, 0x3}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x3, r5, 0x2, 0x7}) 03:58:57 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000a00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:58:57 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:58:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4040ae79, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}]}) [ 2537.676758] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 03:58:57 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:58:57 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000c00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:58:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWCHAIN={0x18, 0x2, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x40}}, 0x0) 03:58:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1a) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 03:58:57 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:58:57 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000e00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2537.762736] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2537.762780] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2537.765938] Bluetooth: hci0: Frame reassembly failed (-84) [ 2537.765976] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2537.986896] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2537.986912] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2537.988256] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2538.002195] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 2538.184289] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2538.184303] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2538.184351] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2539.787750] Bluetooth: hci0: command 0x1003 tx timeout [ 2539.794459] Bluetooth: hci0: sending frame failed (-49) [ 2541.867808] Bluetooth: hci0: command 0x1001 tx timeout [ 2541.873214] Bluetooth: hci0: sending frame failed (-49) [ 2543.947777] Bluetooth: hci0: command 0x1009 tx timeout 03:59:07 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:59:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chmod(0x0, 0x0) 03:59:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f00000000c0)) 03:59:07 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000f00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:59:07 executing program 5: 03:59:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x7, r5, 0x8}, 0x10) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x7, r7, 0x8}, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080129bd7000ffdbdf251300000008000300", @ANYRES32=r5, @ANYBLOB="0500c2008600000008000300", @ANYRES32=r7, @ANYBLOB="3da0a9ee6669705cd8f5a1915b1535206818f17c097659cc45b2fed226822d7400f4abbf1e65d77d54a88434e2ca531f7a7a2beaa1"], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x880) 03:59:07 executing program 5: [ 2547.946378] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2547.966465] Bluetooth: hci0: Frame reassembly failed (-84) [ 2547.972888] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2547.986275] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 03:59:07 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdd86, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2547.993155] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2547.994068] Bluetooth: hci1: Frame reassembly failed (-84) [ 2548.045290] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:59:07 executing program 5: 03:59:07 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:59:07 executing program 3: 03:59:07 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06002000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:59:07 executing program 5: 03:59:07 executing program 3: [ 2548.242664] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2548.262848] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2548.289654] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2550.027707] Bluetooth: hci1: command 0x1003 tx timeout [ 2550.028052] Bluetooth: hci0: command 0x1003 tx timeout [ 2550.033168] Bluetooth: hci1: sending frame failed (-49) [ 2550.046399] Bluetooth: hci0: sending frame failed (-49) [ 2552.117812] Bluetooth: hci0: command 0x1001 tx timeout [ 2552.123165] Bluetooth: hci1: command 0x1001 tx timeout [ 2552.123222] Bluetooth: hci0: sending frame failed (-49) [ 2552.134235] Bluetooth: hci1: sending frame failed (-49) [ 2554.187946] Bluetooth: hci1: command 0x1009 tx timeout [ 2554.193514] Bluetooth: hci0: command 0x1009 tx timeout 03:59:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f00000001c0), 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000240)=0x20) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 03:59:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06003f00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:59:17 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff89, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:59:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f00000000c0)={0x2, 0x7f, 0x4}) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 03:59:17 executing program 3: getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000004) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000140)) 03:59:17 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000100)=0xffffffffffffffff, 0x12) [ 2558.188206] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 03:59:17 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:59:17 executing program 5: getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x232}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2558.234411] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2558.245923] Bluetooth: hci0: Frame reassembly failed (-84) [ 2558.256421] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2558.266729] Bluetooth: hci0: Frame reassembly failed (-84) 03:59:18 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06004000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2558.286102] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2558.295818] Bluetooth: hci1: Frame reassembly failed (-84) [ 2558.335984] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 03:59:18 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2558.511255] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2558.551327] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 03:59:18 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2558.592999] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:59:18 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06004800a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2558.789346] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2558.796900] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2558.824971] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2560.267853] Bluetooth: hci0: command 0x1003 tx timeout [ 2560.273248] Bluetooth: hci0: sending frame failed (-49) [ 2560.347853] Bluetooth: hci1: command 0x1003 tx timeout [ 2560.353242] Bluetooth: hci1: sending frame failed (-49) [ 2562.347863] Bluetooth: hci0: command 0x1001 tx timeout [ 2562.353301] Bluetooth: hci0: sending frame failed (-49) [ 2562.427749] Bluetooth: hci1: command 0x1001 tx timeout [ 2562.433169] Bluetooth: hci1: sending frame failed (-49) [ 2564.427827] Bluetooth: hci0: command 0x1009 tx timeout [ 2564.507749] Bluetooth: hci1: command 0x1009 tx timeout 03:59:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000000c0)={0x2, 0xff, 0xfffffffffffffffc, 0x100000001, 0xfd8, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) 03:59:28 executing program 3: getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000004) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000140)) 03:59:28 executing program 2: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x50, r2, 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 03:59:28 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/timers\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/233, 0x7ffff000}], 0x1) 03:59:28 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:59:28 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06004c00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:59:28 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2568.411155] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2568.425987] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2568.440880] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:59:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x232}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2568.529142] Bluetooth: hci0: Frame reassembly failed (-84) [ 2568.531034] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 03:59:28 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06655800a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2568.592893] Bluetooth: hci1: Frame reassembly failed (-84) [ 2568.593058] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 03:59:28 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:59:28 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2568.746356] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2568.765629] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2568.774222] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:59:28 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06006000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2569.006717] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2569.031441] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2569.039767] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2570.597771] Bluetooth: hci0: command 0x1003 tx timeout [ 2570.603267] Bluetooth: hci0: sending frame failed (-49) [ 2570.677769] Bluetooth: hci1: command 0x1003 tx timeout [ 2570.683221] Bluetooth: hci1: sending frame failed (-49) [ 2572.667863] Bluetooth: hci0: command 0x1001 tx timeout [ 2572.673467] Bluetooth: hci0: sending frame failed (-49) [ 2572.747832] Bluetooth: hci1: command 0x1001 tx timeout [ 2572.753233] Bluetooth: hci1: sending frame failed (-49) [ 2574.757866] Bluetooth: hci0: command 0x1009 tx timeout [ 2574.827828] Bluetooth: hci1: command 0x1009 tx timeout 03:59:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x10) [ 2578.622820] Bluetooth: hci0: Frame reassembly failed (-84) [ 2578.628813] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 03:59:38 executing program 5: getpriority(0xfce42d61485c322c, 0x0) 03:59:38 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:59:38 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06586500a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:59:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe2$9p(&(0x7f00000000c0), 0x4000) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = socket$inet6(0xa, 0xf, 0x7) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x7, @rand_addr="9862abdc562600cd6066d0cb1224031b", 0x3}}, [0x10001, 0x2, 0x16b, 0x6, 0x3ff, 0x7, 0x10001, 0x8, 0x81, 0x1, 0x10000, 0x1000, 0x0, 0x9, 0x6]}, &(0x7f0000000200)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0xd6fe, 0xd789, 0x2, 0x955, 0x6, 0x101, 0x8, 0x5, r3}, 0x20) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 03:59:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c480200020000de010300000000e4ff064b3f013a00fb48a16700008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900010000000b0000db000004da3600"}, 0xbd, 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa0c, {&(0x7f0000000280)}}, 0x457d10) connect$rds(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) 03:59:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000000)={0xc, 0x1, 0x8001}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000000c0)={0x0, 'team0\x00', {0x2}, 0x7}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x34) 03:59:39 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2579.277553] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2579.288993] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2579.304973] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2579.369079] Bluetooth: hci1: Frame reassembly failed (-84) [ 2579.388177] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 03:59:39 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06006800a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:59:39 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:59:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@rthdr_2292={{0x18}}], 0x18}}], 0x2, 0x0) 03:59:39 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2579.893511] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2579.901330] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2579.909091] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2580.667726] Bluetooth: hci0: command 0x1003 tx timeout [ 2580.673172] Bluetooth: hci0: sending frame failed (-49) [ 2581.388034] Bluetooth: hci1: command 0x1003 tx timeout [ 2581.393457] Bluetooth: hci1: sending frame failed (-49) [ 2582.747877] Bluetooth: hci0: command 0x1001 tx timeout [ 2582.753318] Bluetooth: hci0: sending frame failed (-49) [ 2583.467828] Bluetooth: hci1: command 0x1001 tx timeout [ 2583.473244] Bluetooth: hci1: sending frame failed (-49) [ 2584.837785] Bluetooth: hci0: command 0x1009 tx timeout [ 2585.557782] Bluetooth: hci1: command 0x1009 tx timeout 03:59:48 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x2, 0x1, 0x3, 0x20}, 0x20) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'lo\x00', {0x8000}, 0x3ff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000180)) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x7) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 03:59:48 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06006c00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:59:48 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:59:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000500)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) [ 2588.879366] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2588.886872] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2588.908784] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2588.938313] Bluetooth: hci0: Frame reassembly failed (-84) 03:59:49 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:59:49 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000680)="62f23e748cdfecc0d3bcb88248f9f8f8e8ba030000000000001dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a30142ee9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffd92, 0xb6}], 0x80000, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) 03:59:49 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06007400a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:59:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x2, 0x4, 0x8}}, 0x14) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000002c0)={0x40, "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"}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) mkdirat$cgroup(r3, &(0x7f0000000100)='syz1\x00', 0x1ff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) [ 2589.529991] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2589.547981] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2589.561955] Bluetooth: hci1: Frame reassembly failed (-84) 03:59:49 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2589.574741] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2589.591632] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:59:49 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06007a00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:59:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80000, 0x50) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = gettid() ptrace(0x10, r4) r5 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r6 = dup2(r5, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r6, &(0x7f0000000280)={0x11e}, 0x269) statx(r6, &(0x7f0000001340)='./file0\x00', 0x0, 0x7ff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = geteuid() r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000002980)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000002a80)=0xe8) r13 = gettid() ptrace(0x10, r13) r14 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r15) fcntl$getownex(r0, 0x10, &(0x7f0000005240)={0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000005280)='./file0\x00', &(0x7f00000052c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r19, r18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r21, r20) getgroups(0x2, &(0x7f0000005340)=[r18, r20]) sendmsg$netlink(r1, &(0x7f0000005400)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x1}, 0xc, &(0x7f00000051c0)=[{&(0x7f0000000440)={0x1a4, 0x15, 0x20, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x18b, 0x4c, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x73, 0x0, 0x0, @uid=r3}]}, 0xffffffffffffff68}, {&(0x7f00000002c0)={0x170, 0x17, 0x24, 0x70bd25, 0x25dfdbff, "", [@nested={0x15d, 0x4, 0x0, 0x1, [@generic="1f376859c8bd4e0422ae0cf9e6c3abc18e4dddba22f00d2c4ec208f21ad531a1b13900", @generic="82f2df151e5f961ad0a6eca98afae054703c68a17cb6e3eea609b5f73ac4a9671872d7536b6c388f5c917db098730a7c34e6c38f47ca77f4922e317afcdffddcd569f8fc3dfa6fe943e107897f61f01c8ee370111f6708f851aa077f4cdc", @generic="2559d0f6124a9505b02d6f5b1665461815f3be49e9165e9a70052f6082b3d0fea71af5c608df959c633f39e5cd7a995711b156724015f53bc29ae2fa104e4ea15976b16aab5f5bb29701c8de72dd216aa15aa27c27d5f3b0a648882bcaffd99385caa8ccd02308ce7dc7e83c85b12819322f98359401629399960767b820d289c28f6e1299653d9a851fa7e85e19e65cfd91339cd489267cfb90ede9bd80e2799e7eb695239f7a90716a3bc1e4b98d24", @typed={0x25, 0x2d, 0x0, 0x0, @binary="0cd8a25ad01cf27bd2839af6ff723eb90b0dc3affb0e39f2cb04e4e2a30836734e"}]}]}, 0x170}, {&(0x7f0000001480)={0x1038, 0x23, 0x410, 0x70bd29, 0x25dfdbfd, "", [@typed={0x14, 0x43, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, [], 0x2f}}, @nested={0x1014, 0x14, 0x0, 0x1, [@generic="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", @typed={0x8, 0x1c, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@empty}]}]}, 0x1038}, {&(0x7f00000057c0)={0x374, 0x34, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x259, 0x50, 0x0, 0x1, [@generic="7366a4b54b4bd08b93af671048", @generic="1ec41221f4a9ccd39cccc0430f783a7e4314cd296cd0995e1157fc84af7a183409a3b5b615bca064ca5999c37a34f1623be30091951dd19b0a05a7a5977c147ccc30454ea08590848aa6cd9f3ccf925a8b921f636e0050d69978717bb619a2ddd424e7d55b917f4a4b78125fc5b83f0da2eedab98979cd6c785b94e7d98e6929507bec7ae12f5641cca91fc3ed2868e18d367aa0f3493531d0067511a3f50cda6d40406945b237270c4916349780eb114af727e576e11a83b7714a31a55e9f3ceb7644719385460863bb20349a4126c8b2d95895bac608bb0554ac1809a391431b4d8cbe97ba3b25c6fc0310b38f708d01", @generic="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", @typed={0x8, 0x1a, 0x0, 0x0, @uid=r8}, @generic="fd7b00289b60831b358ee99db0711ac5ec9db6f1441c2ce1739ea8932cb0b973", @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x88, 0x0, 0x0, @u64=0x1ff}]}, @generic="ba822e56259fb4b1beeb3f47e2239718006f2a15e779aa68f38d27cd38cec4ecc64e7d4229830c22c8c19bad5bff65579aaf18cf8481abdeadaacbad5a83863db748d0c21212bbe4b134f34369030444b92a92eb6cc1c60f0cd68e085dab68b5f361256ab370d6ae1f7907927670e634e95a36f872e090f19642948ce7aea58882a0f7344512a322575edd70d7ed8dc37635bc1492256a0547893d816371b56944052d5e9b5ee618a14e08eb86457effce176367828d53d68c33344b5d5c457ca9c35247b365542bdcc26e48a3185e1358eed6c5fbdcd46565ebf227afcf7743c1254ea4a0092c39cf8f7549752cdc57f9895f249483", @nested={0x8, 0x32, 0x0, 0x1, [@typed={0x4, 0x27}]}, @typed={0x6, 0x5f, 0x0, 0x0, @binary="74df"}]}, 0x374}, {&(0x7f00000027c0)={0x1a0, 0x10, 0x100, 0x70bd26, 0x101, "", [@typed={0xe, 0x6a, 0x0, 0x0, @str='/dev/ptmx\x00'}, @generic="fe14ca5904d48f59cc4ee0abad3803f7f9749246297830a0af4d2b9fef3e1b5ff0445111d7f12c51f0c15dbc75b68c83c51ef40a3db85729fb586775f6a0fbc2df604eb4df612d47e241214aad0a4798ec0da8411bf1c6a95df59c7954cc2e380af1b0eaf96e5265bfebb1b8227c8555c9101523a695992b9f87c9a9d40b6bb6679bd1a6b49d945177ab5b0bc9ebe2bd3285f019b66b3f8f9d59040923d32fecb6d99a708f2c8fb91e9f749b157d3eb4f82ec475126a67", @typed={0xbe, 0x25, 0x0, 0x0, @binary="3cf75ffded6418b956245b583dc062130fa522549b0dedb7f24abb85f21aac1682461d4d0f256e5920c70e820075cca13f7b7481f0e6717cfa2d44732ed62e932a98b27de5d153b705d3b2793bedb310f4cf4d885afa2f0d7e0cccebf51a278f117501703f60aa4b1740b8c6bd76ea23dd0ba08f191bb05e128a1e5823128be91cb9a3220d3cd8d4da051140a3fb7e491d179685a1744002c7f2563ef1744a9d31c7d3d3075e87706c0273085d29d9a0bfe5110f6422c33b6e0a"}, @typed={0x8, 0x18, 0x0, 0x0, @uid=r10}]}, 0x1a0}, {&(0x7f0000005b40)={0x2740, 0x34, 0x0, 0x70bd26, 0x25dfdbff, "", [@nested={0x10bb, 0x32, 0x0, 0x1, [@generic="09bb70e6bb69110946367e37335041b0eb30db319813a0ac06fb8ad9b6bc36c45fffaea59fd38aacd1f0c96b69ea9cca343da9a648028bf0201987f68fa815c6cb5cd33727f4060e219d646d6b6d20d1315cde682409d1e9e3a58a6da61988ee9244d4425e4b371e468c64c2df11f09bdce68571987fedd822950deb2f2a1cc4e30139f48f595d6384f84ffcc399961af85fdcbd2e6ea77c22d31422456936e82a32299e62fb540132a1e910391d7171b00f440a6d2005", @generic="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"]}, @nested={0x4, 0x6b}, @nested={0x27, 0x68, 0x0, 0x1, [@generic="b113949e23b78b2934ddb7326ce15a2c55af6a5f7a528bf9dcb870", @typed={0x8, 0x71, 0x0, 0x0, @uid=0xee01}]}, @nested={0x11bb, 0x66, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x2}, @generic="e519a7cc0b90c05b05f6c98a72cea7b199ac953b6c7270e05c42fff4f75ca25a50b250cee64d6384fa16538f4388b4d334fd3f8c145ac8", @generic="4560392a17b58c5f19acdedfb4d50d5cd85636aaede9139d425395e7b57ebd5649f2934b42ecef35b8b9a473bb4ea4cc53e0b145e00e81635314411e1ca0595f5e32e2b2d419629689f93945262b430237d5775f4cb0c9c2e2b43c0f3d732dfc01883d3ce95a5b19a702b56737d9447535dc05e5dea3e71b1c4bac2ebc063bcd0ea6c8729dacf1d44d6f2a3350e23fc6f0e1aff8746cd6a2a5037f8b11a20f368fc7137a3be1b0ad0540297f8e93a29980f2365cc1f7fdffd6a9629feb305ff018d34da853e6667aaae0b4178156251630d827b2db21c9bcdf7276cc827d772bb8b50bbf41104fe5d679b0bf0ac66ac3", @generic="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", @typed={0x8, 0x7d, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x3b, 0x0, 0x0, @fd=r0}, @generic="71f01672a2efc6d8c0504254988cd05aae877b74a4fa9b18834e8f81fffd159c7292098f47caafb6326690a2f330c88220322d4a6fd0847e800eb942ccd99e4534b159978c419393a05f49423a5e7f7ebcddfc916483d34d112488f4856e0e893677691c64ed68225a4999cff3664fb2a5005536"]}, @generic="55b8aac2f6657d64b75ca92ca6580f8021aa0acf008fda2b1565552ffc76ed371b9937086d43009ee4bc6d719d71f5fff6e0e756794b74e9", @nested={0x25b, 0x11, 0x0, 0x1, [@typed={0xc, 0x68, 0x0, 0x0, @u64=0x2}, @generic="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", @typed={0xc, 0x7d, 0x0, 0x0, @u64=0x8}, @generic="fb18383fd42dc2d27028cb3b307b5c57847ec6a10bd96ac16be2f0438717fa9a129fc7b1a51fd84067fe4d7c728cab63583523f7292825331b90572830a2bdc240f10ba4e7affb00cab2db7e5bc6b10b682249599e37c79f848fd6e121cc8353eaa4c2e72767dfd52ab22f853dcc745b134b1be21adf2d6ebbc4d05346c55266c9fd394c", @typed={0x8, 0x85, 0x0, 0x0, @uid=r12}, @generic="b2941ede40d5aaee", @generic="4dde0067443713c78457d121e0984a746bc95bbd2b955931332f83c8dae218575e8f6f8aea0a0755f94dd7703b5d23962152e278218bdc8d85ede6e3176bfd6c91e4412c7028a90966f764", @generic="a26e3bc8bc43edebfc1e", @generic="d76a4bd20b6494348870580321152e3afa19d6f1fe4b690620573ae2b0031c0be15876d4bbeaccc6c3a91c56bc86e07e84d243b38905347f02f2f92a3a704a9ba19e67024b463ab7b2005bac484b2b23b4a81af0196b4e8b9f6b"]}, @generic="c5862bda59a6f17d62983384dd95236285b35355771c8833596ed94661f48de3deeaa0879712b55774283f1934ec4632f61afaf16e0ec6d43cc4823ce0647a8fa96184a4e680f8030528e6c992adb17c685dd70ccf9eec5fab7f478cc83ec9adba8ec73ab13cd1a77cb893291321ff835b8933f7d190ed5101cc18cd4929cbfbb43c4bca7da048cea186ecbba4a6c25d452765ddeca71265dd20f02085b8abdcc902152a3bd058769fe894439afd6cc975d1ed4d9702ac71722a5e14b15e5c2236819c2008f8626e32c62fb788057057032d8fe5667680b4c9be806d6c5a3a02665c5aa47e5305dce1a52a9aeb98ac00"/251, @nested={0xfa, 0x6f, 0x0, 0x1, [@generic="a12ae2f059acc863119b7d95de01cf43ce5784715c3a2a3affd82a79e2c5b5dead990bc5a2e8452e5f5c5f001905e17e92cdf6fda85796776690de5f005e93812e0cdbc99c7a6f782b9060efa0658c1a306ba397029b6abf1b1418e10cbb99b0690b23873d", @generic="77aada2ff7a01247a90e25978f438e0af94e4d9037f7f6173a6e5859ce1d7e4c3e6c759c91bc8723d6531b0b9ee57c6c4cf5ebb02acaa779aa1533b8a5dd89cdbc624c8a96052b16a13442c577ca8135a457ea45ab2671375c7c31b40eff36cd5e94a532415adadb8fbea2bc3c751f112ff9c962423c902794e5af7abdfa9157c37019efef927bc35a5757595721b6320e"]}, @generic]}, 0x2740}], 0x6, &(0x7f0000005380)=[@cred={{0x1c, 0x1, 0x2, {r13, r15, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r22}}}], 0x60, 0x4000}, 0x880) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 03:59:49 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2589.743068] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2589.776844] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2589.789292] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2590.987728] Bluetooth: hci0: command 0x1003 tx timeout [ 2590.993309] Bluetooth: hci0: sending frame failed (-49) [ 2591.637739] Bluetooth: hci1: command 0x1003 tx timeout [ 2591.643208] Bluetooth: hci1: sending frame failed (-49) [ 2591.787992] Bluetooth: hci2: command 0x1003 tx timeout [ 2591.793448] Bluetooth: hci2: sending frame failed (-49) [ 2593.067747] Bluetooth: hci0: command 0x1001 tx timeout [ 2593.073146] Bluetooth: hci0: sending frame failed (-49) [ 2593.708080] Bluetooth: hci1: command 0x1001 tx timeout [ 2593.713483] Bluetooth: hci1: sending frame failed (-49) [ 2593.868101] Bluetooth: hci2: command 0x1001 tx timeout [ 2593.873615] Bluetooth: hci2: sending frame failed (-49) [ 2595.157876] Bluetooth: hci0: command 0x1009 tx timeout [ 2595.787784] Bluetooth: hci1: command 0x1009 tx timeout [ 2595.947804] Bluetooth: hci2: command 0x1009 tx timeout 03:59:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x121900, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) signalfd4(r0, &(0x7f00000000c0)={[0x2]}, 0x8, 0x800) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 03:59:58 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06fe8000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:59:58 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:59:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 2599.102551] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2599.125292] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 03:59:58 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:59:58 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06008100a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2599.148079] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2599.156747] Bluetooth: hci0: Frame reassembly failed (-84) [ 2599.182081] Bluetooth: hci3: Frame reassembly failed (-84) [ 2599.182454] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 03:59:58 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2599.268071] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2599.275717] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2599.283784] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 03:59:59 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe09b2a4a280930a06000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:59:59 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 03:59:59 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06fec000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2599.745201] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2599.756792] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2599.784787] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 2599.794429] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 2599.804559] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 04:00:00 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:00:00 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0601d000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2601.147685] Bluetooth: hci0: command 0x1003 tx timeout [ 2601.154705] Bluetooth: hci0: sending frame failed (-49) [ 2601.227722] Bluetooth: hci3: command 0x1003 tx timeout [ 2601.233165] Bluetooth: hci3: sending frame failed (-49) [ 2603.237772] Bluetooth: hci0: command 0x1001 tx timeout [ 2603.243347] Bluetooth: hci0: sending frame failed (-49) [ 2603.307781] Bluetooth: hci3: command 0x1001 tx timeout [ 2603.313324] Bluetooth: hci3: sending frame failed (-49) [ 2605.307776] Bluetooth: hci0: command 0x1009 tx timeout [ 2605.387729] Bluetooth: hci3: command 0x1009 tx timeout 04:00:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@sha1={0x1, "6c06473eac199fe47c548d971f4b9c14923f48fc"}, 0x15, 0x1) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 04:00:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) dup2(r3, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 04:00:09 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0608d400a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:00:09 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:00:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000600)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000005c0)={0x0, 0x0, 0xf, 0xe, 0x162, &(0x7f00000001c0)="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"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r3 = accept4$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c, 0x80000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r7 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r8 = dup2(r7, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r8, &(0x7f0000000280)={0x11e}, 0x269) ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000000640)={0x5, 0x35e}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0xd, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={r6, 0x4}, &(0x7f0000000180)=0x8) 04:00:09 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0412fe01b2a4a280930a06000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2609.374027] validate_nla: 3 callbacks suppressed [ 2609.374038] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2609.407174] Bluetooth: hci0: Frame reassembly failed (-84) [ 2609.407494] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2609.414171] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:00:09 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2609.453212] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2609.460136] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2609.468517] Bluetooth: hci1: Frame reassembly failed (-84) 04:00:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) dup2(r3, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 04:00:09 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600f000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2609.495912] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 2609.512582] netlink: 'syz-executor.5': attribute type 21 has an invalid length. [ 2609.532227] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 04:00:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 04:00:09 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2609.667193] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2609.673189] Bluetooth: hci2: Frame reassembly failed (-84) [ 2609.682061] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2609.707009] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:00:09 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600fc00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2609.716087] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2609.802269] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2611.467816] Bluetooth: hci1: command 0x1003 tx timeout [ 2611.473332] Bluetooth: hci1: sending frame failed (-49) [ 2611.478858] Bluetooth: hci0: command 0x1003 tx timeout [ 2611.484212] Bluetooth: hci0: sending frame failed (-49) [ 2611.707773] Bluetooth: hci2: command 0x1003 tx timeout [ 2611.713266] Bluetooth: hci2: sending frame failed (-49) [ 2611.787713] Bluetooth: hci3: command 0x1003 tx timeout [ 2611.793213] Bluetooth: hci3: sending frame failed (-49) [ 2613.547763] Bluetooth: hci0: command 0x1001 tx timeout [ 2613.553200] Bluetooth: hci0: sending frame failed (-49) [ 2613.558795] Bluetooth: hci1: command 0x1001 tx timeout [ 2613.564185] Bluetooth: hci1: sending frame failed (-49) [ 2613.787745] Bluetooth: hci2: command 0x1001 tx timeout [ 2613.793236] Bluetooth: hci2: sending frame failed (-49) [ 2613.867741] Bluetooth: hci3: command 0x1001 tx timeout [ 2613.873140] Bluetooth: hci3: sending frame failed (-49) [ 2615.627803] Bluetooth: hci1: command 0x1009 tx timeout [ 2615.633151] Bluetooth: hci0: command 0x1009 tx timeout [ 2615.867776] Bluetooth: hci2: command 0x1009 tx timeout [ 2615.957802] Bluetooth: hci3: command 0x1009 tx timeout 04:00:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x39c) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSBRK(r2, 0x5427) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:00:19 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x543, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:00:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x2000, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0) r3 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0x90000037) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@dev, 0xcdf6, 0x2, 0x3, 0x3, 0x0, 0x7}, 0x20) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) dup2(r1, r5) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 04:00:19 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0680fe00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:00:19 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2619.600316] validate_nla: 2 callbacks suppressed [ 2619.600328] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2619.655445] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2619.665356] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2619.689326] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2619.696381] Bluetooth: hci1: Frame reassembly failed (-84) 04:00:19 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06c0fe00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:00:19 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x608, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2619.795297] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2619.803078] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:00:19 executing program 3 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 04:00:19 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:00:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 04:00:19 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600ff00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:00:19 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2620.255950] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2620.289007] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2620.317940] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2620.353820] FAULT_INJECTION: forcing a failure. [ 2620.353820] name failslab, interval 1, probability 0, space 0, times 0 [ 2620.369100] Bluetooth: hci3: Frame reassembly failed (-84) [ 2620.384124] CPU: 0 PID: 12524 Comm: syz-executor.3 Not tainted 4.19.101-syzkaller #0 [ 2620.392045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2620.401500] Call Trace: [ 2620.404101] dump_stack+0x197/0x210 [ 2620.407748] should_fail.cold+0xa/0x1b [ 2620.411658] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2620.416798] __should_failslab+0x121/0x190 [ 2620.421079] should_failslab+0x9/0x14 [ 2620.425001] kmem_cache_alloc_node+0x56/0x710 [ 2620.430170] __alloc_skb+0xd5/0x5f0 [ 2620.434053] ? skb_trim+0x190/0x190 [ 2620.437686] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2620.443225] ? __ldsem_down_read_nested+0xf3/0x720 [ 2620.448170] h4_recv_buf+0x5a6/0xde0 [ 2620.451889] ? __lock_is_held+0xb6/0x140 [ 2620.455955] ll_recv+0xe4/0x200 [ 2620.459247] hci_uart_tty_receive+0x225/0x530 [ 2620.463768] ? hci_uart_write_work+0x710/0x710 [ 2620.468349] tty_ioctl+0xe91/0x1510 [ 2620.471981] ? tty_vhangup+0x30/0x30 [ 2620.475755] ? mark_held_locks+0x100/0x100 [ 2620.479991] ? proc_cwd_link+0x1a0/0x1d0 [ 2620.484118] ? show_port_ib_mtu+0x200/0x260 [ 2620.488438] ? __fget+0x340/0x540 [ 2620.491890] ? __might_sleep+0x95/0x190 [ 2620.495856] ? tty_vhangup+0x30/0x30 [ 2620.499579] do_vfs_ioctl+0xd5f/0x1380 [ 2620.503467] ? selinux_file_ioctl+0x46c/0x5d0 [ 2620.507964] ? selinux_file_ioctl+0x125/0x5d0 [ 2620.512466] ? ioctl_preallocate+0x210/0x210 [ 2620.516870] ? selinux_file_mprotect+0x620/0x620 [ 2620.521624] ? iterate_fd+0x360/0x360 [ 2620.525422] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2620.530959] ? fput+0x128/0x1a0 [ 2620.534239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2620.539786] ? security_file_ioctl+0x8d/0xc0 [ 2620.544192] ksys_ioctl+0xab/0xd0 [ 2620.547647] __x64_sys_ioctl+0x73/0xb0 [ 2620.551540] do_syscall_64+0xfd/0x620 [ 2620.555337] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2620.560517] RIP: 0033:0x45b399 [ 2620.563745] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2620.582664] RSP: 002b:00007ff96895cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2620.590379] RAX: ffffffffffffffda RBX: 00007ff96895d6d4 RCX: 000000000045b399 [ 2620.597662] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 2620.604940] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2620.612202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2620.619476] R13: 000000000000057e R14: 00000000004c6c95 R15: 0000000000000000 [ 2620.657980] Bluetooth: hci3: Frame reassembly failed (-12) [ 2621.707780] Bluetooth: hci1: command 0x1003 tx timeout [ 2621.713212] Bluetooth: hci0: command 0x1003 tx timeout [ 2621.713250] Bluetooth: hci1: sending frame failed (-49) [ 2621.724103] Bluetooth: hci0: sending frame failed (-49) [ 2622.427733] Bluetooth: hci2: command 0x1003 tx timeout [ 2622.427739] Bluetooth: hci3: command 0x1003 tx timeout [ 2622.433168] Bluetooth: hci3: sending frame failed (-49) [ 2622.439619] Bluetooth: hci2: sending frame failed (-49) [ 2623.787800] Bluetooth: hci0: command 0x1001 tx timeout [ 2623.793195] Bluetooth: hci0: sending frame failed (-49) [ 2623.799190] Bluetooth: hci1: command 0x1001 tx timeout [ 2623.804952] Bluetooth: hci1: sending frame failed (-49) [ 2624.507750] Bluetooth: hci3: command 0x1001 tx timeout [ 2624.507792] Bluetooth: hci2: command 0x1001 tx timeout [ 2624.513172] Bluetooth: hci3: sending frame failed (-49) [ 2624.524263] Bluetooth: hci2: sending frame failed (-49) [ 2625.867726] Bluetooth: hci0: command 0x1009 tx timeout [ 2625.867889] Bluetooth: hci1: command 0x1009 tx timeout [ 2626.587894] Bluetooth: hci2: command 0x1009 tx timeout [ 2626.593304] Bluetooth: hci3: command 0x1009 tx timeout 04:00:29 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000200a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:00:29 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:00:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x711200, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{}, {0x20, '@vmnet0ppp0eth0ppp1'}], 0xa, "1be01e8b16ee02f4"}, 0x6a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000140)={0xa, {0x4, 0x0, 0xfc}}, 0xa) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup2(r4, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r5, &(0x7f0000000280)={0x11e}, 0x269) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000180)=[0x2], 0x1, 0x6, 0x8, 0x3, 0xffff, 0x3, 0x10000, {0x6, 0x4, 0x8, 0x2, 0x5, 0x7, 0x3, 0xb2, 0x8000, 0x8, 0x800, 0x101, 0x5, 0x10001, "a37a2eee5047a30c3f5b81e7e54f5ae784834e078210cf843f8e8e463acb408f"}}) [ 2629.868322] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2629.902571] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2629.910327] Bluetooth: hci0: Frame reassembly failed (-84) 04:00:29 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2629.914591] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2629.920153] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:00:29 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000300a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:00:29 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2630.026976] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2630.045633] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2630.065385] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:00:29 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000400a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2630.159556] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2630.170105] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2630.184047] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:00:30 executing program 3 (fault-call:3 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 04:00:30 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:00:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 04:00:30 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000500a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2630.488212] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:00:30 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe80, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2630.558853] Bluetooth: hci1: Frame reassembly failed (-84) [ 2630.568431] FAULT_INJECTION: forcing a failure. [ 2630.568431] name failslab, interval 1, probability 0, space 0, times 0 [ 2630.619293] Bluetooth: hci2: Frame reassembly failed (-84) [ 2630.633790] CPU: 1 PID: 12558 Comm: syz-executor.3 Not tainted 4.19.101-syzkaller #0 [ 2630.641708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2630.651070] Call Trace: [ 2630.653686] dump_stack+0x197/0x210 [ 2630.657340] should_fail.cold+0xa/0x1b [ 2630.661250] ? avc_has_perm_noaudit+0x38f/0x570 [ 2630.665952] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2630.671068] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2630.676623] ? should_fail+0x14d/0x85c [ 2630.680540] __should_failslab+0x121/0x190 [ 2630.684817] should_failslab+0x9/0x14 [ 2630.688637] kmem_cache_alloc_node_trace+0x5a/0x720 [ 2630.693682] ? __alloc_skb+0xd5/0x5f0 [ 2630.697509] __kmalloc_node_track_caller+0x3d/0x80 [ 2630.702460] __kmalloc_reserve.isra.0+0x40/0xf0 [ 2630.707157] __alloc_skb+0x10b/0x5f0 [ 2630.710884] ? skb_trim+0x190/0x190 [ 2630.714519] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2630.720069] ? __ldsem_down_read_nested+0xf3/0x720 [ 2630.725018] h4_recv_buf+0x5a6/0xde0 [ 2630.728746] ? __lock_is_held+0xb6/0x140 [ 2630.732833] ll_recv+0xe4/0x200 [ 2630.736134] hci_uart_tty_receive+0x225/0x530 [ 2630.740647] ? hci_uart_write_work+0x710/0x710 [ 2630.745250] tty_ioctl+0xe91/0x1510 [ 2630.748898] ? tty_vhangup+0x30/0x30 [ 2630.752623] ? mark_held_locks+0x100/0x100 [ 2630.756869] ? proc_cwd_link+0x1a0/0x1d0 [ 2630.761243] ? __fget+0x340/0x540 [ 2630.764715] ? __might_sleep+0x95/0x190 [ 2630.768704] ? tty_vhangup+0x30/0x30 [ 2630.772551] do_vfs_ioctl+0xd5f/0x1380 [ 2630.776453] ? selinux_file_ioctl+0x46c/0x5d0 [ 2630.780960] ? selinux_file_ioctl+0x125/0x5d0 [ 2630.785465] ? ioctl_preallocate+0x210/0x210 [ 2630.789888] ? selinux_file_mprotect+0x620/0x620 [ 2630.794663] ? iterate_fd+0x360/0x360 [ 2630.798481] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2630.804030] ? fput+0x128/0x1a0 [ 2630.807331] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2630.812883] ? security_file_ioctl+0x8d/0xc0 [ 2630.817305] ksys_ioctl+0xab/0xd0 [ 2630.820773] __x64_sys_ioctl+0x73/0xb0 [ 2630.824682] do_syscall_64+0xfd/0x620 [ 2630.828520] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2630.833717] RIP: 0033:0x45b399 [ 2630.836918] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2630.855854] RSP: 002b:00007ff96895cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 04:00:30 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000600a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:00:30 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000700a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2630.863575] RAX: ffffffffffffffda RBX: 00007ff96895d6d4 RCX: 000000000045b399 [ 2630.870853] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 2630.878149] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2630.885425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2630.892700] R13: 000000000000057e R14: 00000000004c6c95 R15: 0000000000000001 [ 2630.909242] Bluetooth: hci1: Frame reassembly failed (-12) [ 2631.947852] Bluetooth: hci0: command 0x1003 tx timeout [ 2631.953268] Bluetooth: hci0: sending frame failed (-49) [ 2632.587724] Bluetooth: hci1: command 0x1003 tx timeout [ 2632.598891] Bluetooth: hci1: sending frame failed (-49) [ 2632.667731] Bluetooth: hci2: command 0x1003 tx timeout [ 2632.673186] Bluetooth: hci2: sending frame failed (-49) [ 2634.027898] Bluetooth: hci0: command 0x1001 tx timeout [ 2634.033276] Bluetooth: hci0: sending frame failed (-49) [ 2634.677794] Bluetooth: hci1: command 0x1001 tx timeout [ 2634.683210] Bluetooth: hci1: sending frame failed (-49) [ 2634.747793] Bluetooth: hci2: command 0x1001 tx timeout [ 2634.753402] Bluetooth: hci2: sending frame failed (-49) [ 2636.107729] Bluetooth: hci0: command 0x1009 tx timeout [ 2636.747729] Bluetooth: hci1: command 0x1009 tx timeout [ 2636.827742] Bluetooth: hci2: command 0x1009 tx timeout 04:00:39 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000a00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:00:39 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:00:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x7ff, 0x0, 0x57, 0x1000}, {0x0, 0x1, 0xe5, 0x8}, {0x101, 0x81, 0x3, 0x2}, {0x5a9b, 0x51, 0x4, 0x7d}, {0x2, 0x0, 0x5}, {0x4, 0x0, 0x1f, 0x8}, {0xffff, 0x4, 0x3, 0x8}, {0x200, 0x9, 0x23, 0x8}]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000140)={0x0, 0xfffffffd, 0x3f}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0x716}) syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r7 = dup2(r6, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r7, &(0x7f0000000280)={0x11e}, 0x269) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, r7}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000200)={r4, r8, 0x4}) 04:00:39 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2900, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2640.062370] validate_nla: 8 callbacks suppressed [ 2640.062381] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:00:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006880)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="44811e276ba221882e48f99d9ef6b0f6caf20d099ef2ab636cdf0aef99e325445f1105d96ef715e54f5db569632f072be0ea87c6050e0a7620359aba2b8682f4873c61fa49218fe8fbdde764d02f911f8ca8db65b04ed7ae67c52d12685714b24a2db50b9649d87ab919a6c896ab933ee41be62978b086e50f09e1207c078ddf23cf40471afb78e14cf8a9131c49e68a16dd4377bf253934bff6301da1410e1d46437e6b137bfb01fbfa48365f20a62ef1dbd216dac25c5e5e6a3c0d6438a3843a8ba32845b626cbd5d1958f959b39114c5ae74f8e24308cb7714f47da6c9ac874", 0xe1}, {&(0x7f00000003c0)="3b07ef69958442571cdba3930d2027a9846c7d67e8b35c0a24e1f62fe45a03d7647cbbb15daf05b49db93b320dbebc11bdea31c87da49090543745d068057d873a86499c386c9233824a9bc7c4674b907a23283dca77fb0f40a82bcf6226e13ae2ae76d8fb025aa89d5cac9c9c5dcbd668a3621a7762d858c7434743d39f51309854433969427cb1c65e1b620d701469c15cbb1557e1b6d16e541483f4ae9783a85a4df6b459614a0ff79bfe7af5fab57d3e24d596bdf14329507bf43f7a4492664ccbb47bedc2f32eb2cf", 0xcb}, {&(0x7f00000004c0)="f55f74ff20a66c3361c99e7a2c11f54071987487d6b8c4a3791f6830b971b638ebb9280f613ce865fad7766b297177513b1d8118b20a4141888d0910ac8a04a634d783a96a26a7721304a7b7bbcdd2b6ced5dc382df86cc0f42c6de7ee854b328c17d4e3de4b1b98ef22ecd10efde853065c6e84fefde017285cdb13b604a6d784bb6a1353d10b9e80753f81a14a56b574b3d35c16cad5b51591ce03f6f541c02c2ccab035c0b0e293b50a093df01ebb8537788a2b91627000764e77391235e0a9f0", 0xc2}, {&(0x7f00000005c0)="af1973321594eba27a7412498361d6410b730c4b1a00767ff56d7c759d91b3d06d2b4e148cd192ec233adcf043d60c271fb27d22c173bb6f089d1ae0f4e13efa3279a9ff2b4a43641acbd7ce8ba94d7ad9c013fbf77531b8102ddb69e949fa6de6c1a5c3f626f610dc40f67f05b4a0f0ad35927817215cf53f4ebbc8fa43bb4d7101715f2acf182df3ce821248527eaa6621efa973254de6ada9a5cda89739968b62a8ce5964106b2810ee5ad2cdfbafb41cb12785bd26e2", 0xb8}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="a3f5f7673d21dd9b66f73101abc4bf5abd7b71c7beee8751ea6fb9df656041b00be6bae616e26bc6a6d11ee3c8f58b9b40f679fcccd69dfa86fb18a3152bd987d9ee65bec51ed2c2e13a6094a6e928f4965b94c40ef5ad7bf5908442accc6f08d9871b736f66b39385ab5c39c606698c52e3a09bbce626bcbde96479c32f6600f2a6bb96788f1d55495a0a7a4ced30e0f957306b48b9a92af0fe04f7a842b377fa50e2505a824da15126d16066b9b1645ec617a986cc62a8dd20d6495f11ff83f33631", 0xc3}], 0x6, 0x0, 0x0, 0x4088c}, {0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="c17ef208b9ff4e8308f4c1f6959500fbded25d849abc79c1733d2a2ecc70db2a6bee59b3f39d2b248d56cb36c3ec071257b999e050c3b4b074cbd82f7c59f4b374274e84c19ef891ee9472fb9de9d4e05635fb7a433f2de13b070decebb5c0f78ac1ec43aa8da86c2f37e9d3a3adb38f80", 0x71}], 0x2, &(0x7f0000002880)=[@assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x20}, @op={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0xc0, 0x4000001}, {0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002940)="aba36c20265eb4562dd38a0d0618c00020d875191b34958d09dab3d0581a4e680162688993b437a351dd03b4aa56fc865d78b39b5645b5896515121c5e2980bd99bf3d73911d11ded85fb993196d8ad848c610d0169482e699a7e0b1b1e563cf0f5d02bb1f948f583f3e11bf353ceccec53f7abf134a387cd5a7cbc2", 0x7c}, {&(0x7f00000029c0)="73b38d34d3a09e42fab42e296a55a635bbd7fc8be4427ae3e741d24a0f795c9977f94345e929e83acdc0fd98499952efa2d3786da796298a3510abe56fc2e79d8321210893be6a34ac3dc73b079d3b134aa6e8b2934f2c8444192a47c76d9eb958cad809f7fa01d51f7b71e9b095e0125b7264726e7f4415bd0c7b3318e0d9908810b7e4fffff9d4247702cf07ab8b8bf7250274f55eb1c6d5fc3eb7527a7dbba4849e4077bdb638e42b2f518f995adfbb172c822f", 0xb5}, {&(0x7f0000002a80)="102d6c245f1586228afb34ebf29726f64b9ceecb1a5640201326dfe4b093592b965d6d1b52e74d99dba6ea0f4e7b8c6a907d36f2554d7e97c1d3d30dfe55c3f35dacd02f79bc290d09955c444ff09ac701899dbaa8940e4d5b2454d507328d4d1bd20851ffb3925776", 0x69}, {&(0x7f0000002b00)="cd90cb5180de201b06566c4bf55936b507681bf0f4cd0e80a03e5a498538d4734c7af3ad24f1896d", 0x28}, {&(0x7f0000002b40)="1569f4fc4c7381171e274969ecc95d6972d736adfa0a4de90cd407cddabb9245cd35b1be8b7d1f498697be7403d84407dcb0444745c9a37abf58fd3a5d6e20edc57c3dd0af6ec0ec3d7eb1206ffe3e955f2ea4d892f494c3ef90edd5ef6d56980145b3801d8909a1efd422bf3de25783e945f8cfcba233518137bd01fb337a178c3569cdc94a466f5bc70c86a18c3042bcccb792000a0f47b0596ae87b226ba84db9b31b032a83111a746a31064b6f9ce799233c5da0b38d67443bb084dacfb8b06a8248f89b95a5242c169bba18d215cbe61a62c86725446c257a8b9b6b6c3d6a9f3c20433e6212b2ea28bf", 0xec}], 0x5, &(0x7f0000002cc0)=[@iv={0x70, 0x117, 0x2, 0x5b, "525cf2d59bf7743033deceb5dd2b290ec5b3938697b36f83ccbd4c1131625fc8f728cfec12c411d25673d34170922549d3c2913c8531d04ea752dc54182cbcc779f7a8b4655916469456bd9c2b34aab028b2efdbf22eb0cf03e2aa"}, @assoc={0x18, 0x117, 0x4, 0xea1}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0xff}], 0xb8, 0x20000000}, {0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002d80)="9d5c0b10f0cc1dbc78188bdfc16b460c6fd3c36ade5ca96a3e4ae6480f8eb3f01adc0c0b9f9ded4ecdc8441b93d3cadb8d4d18bc", 0x34}, {&(0x7f0000002dc0)="2b875ebcd61dac97213af5a0264cd258f393c1e1bcf645a4bbc0a0a54f58ffc5a66bff391d9d94b15f0f9a60f243ac9f6e3a8fc28bf1c01be2b61059f228f1c5fe135bc050dbca9396dd83b8061811894b6ebfcbcca22f211b14204b837a0e2e5f5b48998f55210162588adfea34be6b090384215eb4f9218766e0207ebe841dcd3001795fdfe4daa87287d4c70935bcfb902208d6b1af6ec35833c0632116fe2ffe11d0564de35514f6fcf774bae2849bfe6acea053a259703a570b6b2765e3eab9e585f71ce2e332b78476ab29", 0xce}, {&(0x7f0000002ec0)="61b9cb2dee0ed695ef30a1d946a28ba93a", 0x11}, {&(0x7f0000002f00)="7680df49e4b4da9f1a23a3ef33e2c5a5a0", 0x11}, {&(0x7f0000002f40)="5f3acad287dd6e9cbd8db5819945f339", 0x10}], 0x5, &(0x7f0000003000)=[@assoc={0x18, 0x117, 0x4, 0x16}, @assoc={0x18, 0x117, 0x4, 0x16}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x676}, @iv={0x68, 0x117, 0x2, 0x51, "cf90499e51bb555b96ad9389b1ed28ac7a68b881fe1d53fd46bc6ee65315bedf84c50922a371a945b20eb8482b06bfcc2c8d76f2d0e5410c60286684bd331c9e4a8b000ed500d490d1853d27428f55b706"}, @assoc={0x18, 0x117, 0x4, 0xfffffffc}, @iv={0xf0, 0x117, 0x2, 0xdb, "9f38f5eb64d8e6e5345545e5855a707613dec43e674655ff3af234bac1d96e419044ecfbbe7372f0059a09458780c223cad42720837f951822961d3e241f5fa5826bba6b341e8db2d6cbaa96ca7356b77427179cf5fdd9454ee7ea9c7c9661b3e9075c5ea1c099335ea0f078580ad69de610e9855043d592ca26107675a4ee722fb5f83bb92523d20a96824dfce0321b46121ec27c01372743413628b4223e1fe39aa17e6d89bccb8e087c243cd62475b5628202eb3dbc0ddb2fe76049084bb0899f94508a15fa4731fc9d92f11dd8d40986a38df78d0b0c23c6f9"}, @assoc={0x18, 0x117, 0x4, 0x1f}], 0x200, 0x8080}, {0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000003200)="c80bd41532e245b58b3a2c739485f0e0209d1a853cf42541f367231a06a6ad4aec", 0x21}, {&(0x7f0000003240)="dd2ad7f941f5a520b018f04dfacce4dd4ff092c4be05bfd6e9e3f48361dc", 0x1e}, {&(0x7f0000003280)="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", 0x1000}], 0x3, &(0x7f00000042c0)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18, 0x20040880}, {0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000004300)}, {&(0x7f0000004340)="bf7be086a34e8c53eacfc107b89970b77eef75156c1e7b5f972fe6c56f68685300437b9669c6e62b822922b35970dd1c9484e6619fe2616f591f74337c5b38a5da967d008da840b5e1255149370840808296ba599c49211521bec741a2aa1b1a0e99aacfc7e7168061b792494b3e8276be059c948654084170b824", 0x7b}, {&(0x7f00000043c0)="8faf55a0aa21b107f28a8ba0bdf57d8209dbfe509c1aaa6afa200ee3ef2f36bae4220ec45f1965142c9b1b8d6c4f840e29603b3cc1c653f94e825e21e1fbd3fba4f422b1956495d72101ca55b0cefd54ee5287a9350bed71d696b76aac6c7dd4c7da68f1fbaf96abf09f609355c8fed694621cdbc34321", 0x77}, {&(0x7f0000004440)="d7747e1d2b991ad905a8800cf315b2a399aec8d2037c511dba47fb0fd2d3931cd5f6a854ed39414f838f7dee9dc0ba98b8a25d101087c578d46ffb621a51f3080be29e655567e342037fa9679ec01a2865f75a9bb815009fe1d6943ed4e5ae3185a0c93ca7de502cfcfc", 0x6a}], 0x4, &(0x7f0000004500)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x78, 0x20000004}, {0x0, 0x0, &(0x7f0000004680)=[{&(0x7f0000004580)="1aa3b899b662d0f9cc12c1094488533900a70c9dab8c1f58a5fdbc4df4c5b1238028be", 0x23}, {&(0x7f00000045c0)="48e8489c39359fb3e5c78fe493b9340790df42476b2178bbba4a41ecff6357849acbf4b2ffd09446977e5e1eea6e4ccf189a437db3f3257dbcfcf48c1755f9529df995ed1138d98c", 0x48}, {&(0x7f0000004640)}], 0x3, &(0x7f00000046c0)=[@iv={0x60, 0x117, 0x2, 0x4b, "817a9336a1bd2e1d6bacb76c825bb7d08836bdf8ea6b4f62a12a7783e174fd7df9b11cbbc7272bb9d486354877fa542bcea23ece2cd26cce04260a5a75dcd3f4ed199e6dba788b92c45ab6"}, @assoc={0x18, 0x117, 0x4, 0xdf}, @iv={0x1018, 0x117, 0x2, 0x1000, "39980047a782d51796ce1c71129136a6ceda408e4595ff12714f4d0e0600a53d9e06e676f4529bb2a2cabf607de48549972ab67577e349598f4645b65bad787bdfdeb3706d51abf81a38f98b53695ce31f66461a7ba25228b7ba25ca276ce4d2ce567d446ccc6640d0134de57ccef141770f6c092d755b226989a83b00f34f5dab045c783fbe6e083e56d537e69f1cf9f1a22a86ad95d8cf915b9478b4a991e08e410a284b799b41b5348e5ec0e8e760bb38ae8584d3765da84b01e0e60f6a58a28884cd39a90c5bd4e3600593242fce8022ba0f0da84c4abcddee79a948c8ac6688bf0e9c840bddda172fee11c369ae97a9e04d2251a4754fe27c75fa0db31f5d11395a975e33c96f4b0716d12f0b217d0f8ea99b95bb1766195e9960af51f13e877c9d9f561dc48a46be497021529846aae885dc4aba7ff4a54969c71ba49f72fd2211112ff849f9701cdaf52f9326ac657e7cad1430fb2417351ea37ed89ff3c8e66db125c1a1334a2abda97fdf68902296776e42539c7b4b2f928765f6c2d87854d4f74f5fc7d2a2e4c70a3b1c4cebcb27761bf858246b0f50a14aa8a8618244dc2b2eba32845bb0b3397670f685a640648b500ad3f089fe1dd7fbf91e8614a0003d6a188caa64392b43285130e3135dd3c5ba390d63df6fae55b893f5c31518a0192df817991ad57731f65c3bed292284b49bb4da042f7710c5dc23fc433a3c33e0c9da06cdc69a63f60830ae714e7a7ce51204e08f803fd33dd4c91a7671e0b0b9211f773014e41310b61c76791cf85b03d2e8cd1819b61560873f4e240515af0f9036bf9652e993630735d51d2a04c17dc788818909143279128291ccbeadac26fe832bc6ca408847b0d924a77a34562c02b13832f0805931bd4ebc7e6f77988ac909f4f5673aabad770caf8eed8feecbb741a9ee0d1858407582b6fb2a9e3c94c8c7f1735c649aa30aa68bc8c8c85f57cd80e3ea3f817bdba55a43c4db2384d157b74ba404d7e399a5ec3b959681a92db2c53af5340c752c3677afdce870d5128428414cb9b5a795f4d48de666409e4dae06c7a8f4ae4d2cda873dca2f344bd02d36f58f39bed5d0aec383b77be8c1b8b43f37af18c77a4a05738851fad248b68f1f5fb572e045676103989a992bf0bd616d69330d025dbc587ec8dd01dc06f887dec5a82f48a42624f1ede6cee563d16134ac0e79ce5e8d71bb54322e635f58dbfb52f1d5102b03a91da40edc4d5648bcba9a92e029dae8f602ca632ef7d1f6822075c379aecaca5210e7032857fc74d48489e99bb1a373c81bab218b0fa000fab08ba25f2af24e6f08a96260a91be9a8f9c3158a92823d21e3467f90ae36107d8e221635693e245a85c2d4e7729af313aa54c6ef346a6bff9caf140eea55a07d118d0c9719d47f6753c39ba710e7f10bdd4dac5b0957f13d9d360f2b436bcd08e18b2359a8e8c39cd10de30b93bf9bda01277f8e5695d1cacd4998577b262bd041ea9ce9440ba29b36579caecd9702ef9c823f252136fdfb56c7adb239451eb57806840885345319946cf1008591a2ac61e3f51f400e80492034282201c62cac680172a9dcc567be1f2da2adab49725cbb8ad231a94effccc39415ef8c06776733eaae76f43990046d7be75b8afaa4de50388e798e0f5109a134ec18d8678dab941bdbd22e14aba89e39d6264d8c67897c3994b791a404d100d5670f0dd01a6cd4bf8d5612d93217458bc0b3e7db38c1b5c112978f9bfc731703314b80fc64fd08a0bb019be1e177ae2a9ca3fcb50ce126009b25f05949021d4fee39e3a4afb9fc50aa11f6ac6297c965fed88a9b394eebcbcaa5d4838d1ee096e9078f65175325a52b5672f03bbe0562df1900a9d9f10b371ea85e7042194b12400d84e01c2b31e93bf5ccb72ad1883d2eee5187f3257d21fb3256b10fdb565e9b254b56bed8a2f11db3f511bc44cdd8b011e4ba7b6ce3171a3a2327cadb47712775f562d891bc71fdb37611af02655e2d41df4a68e5d167f8b1d4b0910ecd4a7cc462828183a4f968d71eb53343f78703d27baac8c158a294aa31bc8567fdd1673986a56763db6e0fa4e2954e22750fb1b466568cd40766a0b631fbd035e2a8b9b785dd5e5937783bc16159ee0c5b1a2c8948f4d1e986f13c6ca50ea9fc23cfb6ac43fdb0bd6cc85fc6173ec952ab80af9855cd4da87c12db3c9334cd45de49f5ad0e9b18c870010134e3f8de13e1b47d5ba18379c2a7ec945fc0ddefd76d1a71ca6ea126eb7f18cf377cded795dde6ba50f476ebf978de45454cbdf5c7089768715a1e90d4b0a17aa31a1a4ee0e83a6a2fe5e730bfff21807349c6db898d652f2c37108abc567f015e45c6c30132e31ff50cf8517514fc971fe9730c06ca13116786fd00e1eb56707ee627ca257bbf4b0255042fe3669918a8e69fff54781fa90499a85630c3ca4c7170997aa594a07e1383f80223edad9fb8f3e16211b68bff3ebbdebdc0bfb6dc94f0c1003db0ca0343b12abcaf91c6f1cad0b3638f41473304f1d5a0650462c46b8150b74836f9f50339ab862df7017ff16a1b0fca271390bd686f3922680a69ee16c64c13d09efcdc88465dce8a829890d0df6cf51612fffd580680816262ed2f40a1559d020abd6e7f7b834deb1b3dbf90c6e1f5e4cc209ef5a42fe74923ef3bf2ae55be2c066ff30d946c7ba07b464e27a8382f77d241f995fc3a56652a78f2648484e1ec6d7e30d5110195f374285fcf88e00e1372f0a3d52823835f50f163d613459444f80162ee7a237d02e789c630f503218416e4965814dcd1d5844c0db9a3e3cc2c28308ebe14143948dd0570983a74c116bc1574755c8abf95eb6015c9a2e4c76fe3ccde8823c38f28b867b14581d0cd882c8f66c633ad60a8f99e107f04f65a17441aafafba97f808990df62706b8b5199d337ca9a10e619b06a66286b83d85d9d9c8f613f443418809c19ae9e6fb2ebc8a5682bae7a09547c544f9eabeecc710439c48f229ef07739fcf923eea9e786db8b6016b3038f0154ae154fe59188d759464756b434dacfa24608370c0f4330722b47d8e255cdd7da1b02a4705bb19e4f42ee37d0ebee242fa8a39d0535cf2fb5e38edd2fcfc81adc2aca53ea61ebef4cec3e51ac1229c61a4953d21cbdb4d2bac695c817e4fd31f7c8aa4e17fd5ec5bee46ca7e89d4dcf355f796d4952d71325c55689e49d06ab9493c4b365b3ba7a536b1226cc7d29ebb2c0a4989d5a9aeda814a53dc8804afe598364dd80fa74b8cd42fe46af51714fac0a285af7e596e7ac149b35705eb5ac3540a7d8fa1ac4c5598b1b675abc4fc0e3abe9943e9caf410d81784d4d1b503f7659db15ce924acf9c0ce08ac7696315b388f15ac4d4e2d0f44478e1d938ff469380a50e3f633d47262bbf0acf15d2ff1953b4c700e2340a00651cce5a565b5b663137649bcd3c5d204ff3cc4ecf4e65f15328009b4fbd22ce3f286e9fd902145302acbda25f15efcb9ccb8685549e79cea823c6c1f9c028a156cb88949a96bbf50e087eb768a08549a9f76f0eefaef4f66cbb24c19ae4dbe9ce8dbc7b9df39076c485c1a59761adfb18c2a799fdfc4dfe2a90bd3176a4f1a96da874b904a31eeac90e05dce69eda6dce339cdff0607966f5f6643db302c62716b87f847c6ec9847ce5b28924b8697ab4f08c86b3e3338c8c4a3b70463c3096b0d2612ff6b5ae76f4f883c28b13ad8dcb79fa79861ddbb5f16e3332cb7add98826943b5ad73e2bfa490e1aa3a8667229f3f748b48b978e762e31579cab4c72a5de6491bb53f83698f7c205ae93fd1a69fc65c129e6edbf77fdfc5d45eb8f502887ba2464813baca30f1c3ff67b0c15c92be5b0d90503c114c368b6799e5e17b3ba38e8a0455f327e3f819685ac1197ee8ad8fbd6f5a39020d35047e0aa922a08182e9c4dcb7791ff9013b708339241ec8065e9859b223391a518b0764b7178179e5e2776218c878b87e7b2f1d55f1edd7bf4486d2cabd584eab1ac381c959a103965b81dd32584201340e519c88c1ba83be910cd23ba4290dda2f055037ee2ec13ed5199d6f87d7413fbfff3ac08f9bb8d79ede49e2687f2b8d85ee6d68cbb23309427ac474776f1adeff2da784381086d9089526fd1ffcd7ff88d73122327bcdc4bfc330f4fec98f3bed304e901e5235b531056b86132f4313baccfa2a4d632edd136772cdd535c2959e682f2e44f1e313431ba96dd743bb9bc6a8e238a505d57497840ce6f3ccb65a75fe94e10c1d3a3672a45d037f46ecaaf8fbac54d17e9ba707d608cac06a3961d0d1ba57d962945dc1b91342b8dc4809ac7b3db5f7634736a637aa7e0535d5d803da1d5482b45cf06b4705ebe7709c8f3064ef45f748b96043df2d9ecfcb60cd628364071303a872a53b20c238c4fd2605a93668629048402a2f0062a268aecf7fc6670e22f6f178d8d305db5da2680e6136943c69ed442d90a38168dd317d316a7c8d37d699f5cfe942eb4ddb6d658f0cb2307dbb5ec9066d7503f0718cd29a88bd9f9a9ce77c4a4b73b664717b13cabc336c7f26cf24a6e537bb0a0d0827d6e635d0a7a808ed195699754e73d693f5c869e30cb6d76b36c8e08f8c1d7bd4ad36013f596b34454a0fe04d75ce56bfdbc430b36c0b5a03734237d3e06cfec30d05e23b8e0b6144e7c99644e4b2304a0f463f8abf5a61ee469409ccce0cf9ce1c09042c0f029a2192443697d68f516c614f9dc00ecfbe67db7a7fad0903cb78a5f78b3608b4eff6391db3395690cd00753b6d2c86b7a486824771e2a9e231c638a688e26a873a96a6e883d1339bccba39d6e47d8e8facece3e03aebde441620d33d8e8c962a419c88b4636e4ec12bdc87f4fc45d6d8ea204151b685338fec9163d0993af2284f0d6a133fa0a8198f67019fd8f57dc96e164153e8d33e3bc2bac3c9f6f3ec1adfa6c3853f2a23792895bdb543aeac59db123f942b1decbd9ea593236ffe1b2d3da063cbffedaf78f57b6d84672361c52908f50d30d53c4f5d929d0c12c0c1be411f4488adbde71fb0127dd9f00c78e12a4e685f3c542a1a84c5e877655ddfa14d7521524d679411b88594b4fb4cd114d81eb916412d8ba345abe25fd47ecc1bf9e4da8fd7831c5fe07671a193e007875096fe1f267df9c0da3ed146f5c4f5f95bf2483b5ab49b762a4b62a3e43ee9cdce713cee8301e6697194be13f438f042ec9d582af616d35ee09561481cc483ded3a1e067d1f23e0a21e94f0b590358da816cc57c8288bdf88d12971d16f1ad82708f378913925310c85ed6c806e71874cad6ff2469b430e0a3d12c0a6e335dd96f0d376706980764f659f03a327b85364faafb827f68e94a131da24563eda979f6340de8dff05f3c5b8ff41b1401c04931735478b3a546b753285ed07881f790e2f8047c43b7baff3786f8b3aaa7b481de439501d48ad7f0be8a8e425a6204b70c743e11d1c9851ff665bb95f444a8155a221e9953c6ebe25311701303408a262f7d371253b7f01b12fd7c53dd21eb78dc485084640b203a0ae97510d1a52f57d79296520828c18544364466dfe34173ff50c57376699137d5d2d45bd3f308beaac807d7c7ff2a9ec7869cec8e258973c51ccf93a138930b0a9714ac37efbafd5113a4476f2c6affceb5b91fff7178d8291767cb6a573e1fcaf225bb459566c551aec72a1048084701870eaa86f45daf75e7b1aad5555923417e4efc7019546f66910ca207b2e8c5eb86fe4b705605e87750474d997819de935d1fdd0091db2e6f82c"}, @iv={0xd8, 0x117, 0x2, 0xbf, "1e1096226e245c464acc747a67d33a67730e384f54c3c5257019f940dd7b01fb138769641adfe40759f426770403dff81427a9b53ea22b96619d12e5f2f5f6e90063974f02d82e3d50edb456405d4d04ac7a02d90c77c60561315b734979ce88e25a50ff350ea6eb1566cdd08e4d3b9ac4a7a1ad8fb4fa3b0f81982a8770690f20cd6d3b832b8da901ef2a38547ef5ae45f1b15493820dc85acda0ac33be6019af97d39ebee1a613dd916ffa95f0f0c0a92853b21699d5ed94f475955f5eac"}, @iv={0x1018, 0x117, 0x2, 0x1000, "fa4890619f435d85352a9d9cd40e396e8ec62cf2b6f1ad33151565f939d136f7b0c8089a7ffc8e3d5dc3c1d8f3ac5bb65d872a4054d2de88677bed96adfec88d22d7a1526b4290696055ea730f18cd284da8e214089223e0bd48f1d83cbaddc273d852f7eb7d78d414a9f805719090b5b84489701dbf9ef85866569102e5ebd9dfa8f6f0e3479af4b4472c7e2f4b5475961c3c0a604db65e1c349e0499c8b3a0f372644721424d7e1595c466c17b07ee42f9e35ab5c736852e11b1ac6ad3ebc30efc67eff845bc6524b9141dadd8cd46ff843db35f964c63e7fda979b974aff6218919d0552c80e79126b479ff131d50456befccfbf8095b0a985fb5737cd9fe6cb7f884980905d3ea81ec97c445e78968288e4da1cfcf4831b6a71a1cc7b826e7f795f5d40f89e984e10f9f0cc301e7a12212cc187bac644f970737cab95b58a2b91929386c606019ddf7a33b21dfc53d453355acc2aee6844dc88b778f9d3e41be928b844e6c1a3f38629e2e924c12da58c819f881c46f3e247419819f1cee6d272841767e1d266d5ddb2f298482d50eb1a6c6fa00fa81ede1bb013d4e5cea9704419950ab1a2bd98407d86c0cd7ecf047362a6d915b46bff310c662d50271535dd9c8610ebb5cfd321490a47efb95784d9e938559e2ce4a16af0b06ad3c6595025c6cf1b08300b9275bf67d66efb2d02e00e0d5b65ddb5bdb9f8301e26e6d4f7a7a96b7105fd62b98e69b4f37247aabfb6cf3bfa78b9dfe71f256a6e51355c5eb531bf7a2bff98085349dc861b8697a7a7aa3bd2fdc2996b7a070b9bc5ad4856003b9dff60c1b5fe488f7f874e2ae0ab853ee17cd60d5f6793ca478472cda0ecea6d2990a47e31122e99c99b1fd2b056db0497c31818130a5329c6f648afddae2f2471687bf2132fffc67c6dd567a7598687c13540685a15bf3892ef111a5acb00412088b6a5bd6d754ca1a0b77a99379184a2b748cd773ca5d44934ace4ac5433f22a8e6666ff0b8f98256f28bbbb5dccef687000614c353c417769057da3e6e3e81db1f4e97167795de575b23d282d20cbdb9a80ea034572cf4bf3107e2253575222223347371204160fe09d1b16733d52f5dee968de7dd45506e3bfa327713eb64387c0caf57138f9f2e742b13d9029fb3b14405a6f62afeee127857d9f2944bcfcf3e176e4f4b31a083d60d9f40752cfeb2e85216b4be99fb73d2724e66033debf81da14a56e21000ea5fd194039c1c47a26852789ab93c056351d7e4229a628458061b06633f443f5f714b2b1fedaf0bc2c2ec0eb93937c7202235f8338fc2a1e873b5206299ff2faa0eb74feadf06b0d5b671eea89e62cc5ab74ab86726049c98978fcb10d5698bd6df5ca8a38d5d38a46c55a59364d27b2272e1f8e3dd1d4475a52674719e83ed9bf866668ce4353882d5a13c78d179d32db346bbd6c46b5d69d4d3e7253c309800961df82a5c5fe3b47d6af36681e6a336017b240e40fb363e194b93c0fb6ee9cf6ad0738016a670be1b4a57c6061f964c6adac015366e90633544bfcd51207c55012b2807f37421852d1a7349efce3283f2445d19ba0be30f12bf7daf9a59e933974c1e4ad2f7fc9284baa0bc4939b7e6fdb4968056b813ea6162d3fece5705661cbb515f9d3e20b4352fb1be03affdfbb946d18b23a78e02cfde4bf241312f3b02d140b1867ed96e4849ab999e3d7777d7e8c51d91b29fba1c9a8310913bfc7d57e24f26186f81cd1919bf714272d9ef60dd368b96d573bf638e87a490cb985878ed57914c5a30997c2ac7cf6527b1dfad9e121690f73dc3ec307713cd9c93dfa45dd934ef0e96d2f5ab46b18281c3e2cfe1e33b697e08c91bed5aac5f043c96c1bd3000dc378336452d0ee78413e47a27450ee1be9881900db261ce5ce576f1703c5c9322f4283872d67917fa46e0ad5ce3515d7d159744baa08b938b50cc3c54a3ab90efea69d2a59fa65af5ebc8252ecac43135372f799f3312b44be8672b11118e991f0a6958f00758fdfcbc697ebef5ade6aa6c0e5fcba37ffcefa333d409598646b8215a7754e692098c3da401ae513743ee7176f61093a08ea99f27d7496bec6239d954080d95343c4d979f4e543c05ea899dc887e8207cffb581d14a3b8cfc233ba19836ac7247c1db57ebbb8e7120e653ed42a44e9c8c60cf95d2bf96fc89f21c41ccf435dbd9167699f64a295dc5ff398ca72e61c1bc1c1b0e58a33e78847098a122741ec080be7eda26af77baa00e1d21ac285dba9fad6a71afdde08dd1f316f61a5731492a33472f122a372b1321fe7f5dfc0b59fbb648924677cb550dadbd60ca15aeae070c792e86ceb778b2eb8c2528821d3960a2c9dfba32f6a14adad7a5f64bc3f6fa19d3e135d206d227c507b06e9f9cb0d5aa1e79116aaae6fda15bcbf23b793eed6eca22262518667340519b316c36d2962c6376713c4ecc9c0a3aeb04fab1b050e9c76085258cdfec421a4dc4b66ae093039352febb09a69ba228aa51fdb79ade7fafb37d8b900c181fcac9a46714f76589f20b92ee8cce22a7642c5c8bedfa362b9d460da9a85c191ba5bcfce88eb8ec6b5173174e2d7883dd6fbb5ac1472132fe8ff4fdb98074041a460c618603a665108a17339e9ccf4bec694eba2952248a05d51c515c7bf3a462ea54b90787a85df8cfdb0eb78711600230955252a8520b7e380b741658ae90772cc52ae502095a6611b5c5488be8788f23105c6db02b20e4b5ad59e17805830872593504fd25c456fe4ad3a50e636549b930e8e07516c7cff0fe266e4dfc447ab6f210acdc04d178be975e7ac9c4f7622aba6dd60cdc2d8b182b9b9f0713fed1426a64a32ec4649bd12f8c97361a780c4d84a5b4bdc3dd90c0fcd1bcb0b78d460f36091ca13796cd23e28786e41652d0412441f84da601f2c7970d4140c3121019db236c1f8d89dfcbc51d561594bf52f5f9c4097ec3f53a02f0c16b8a33620c7a374343e1c421e880603e38467d983fbcde420ef94a67406876d2c10fbdb59edaacf309c6df85599aa8dbe85905e5c1a4b648eee361bfd491c62637144d11998ed7c3b314646f268c90afb38edd1f29194f3a48a583c8d84137653d022cf796b1d038b92750d98b56648a396f49f89afe8db0674e28580c8511740bd0218464c9162cf43a70cd0f623775f1c35baa01db8107bf5be3114ba7456616f27baf8488533d8b0f6c7ff66ad35e914151edd67738b5289929dd387d060192695de080bcbb234264936dfc09d2677ba3ad58e8120272825b8fa561ef4a08a0ed5757a46c729177cbe4d3646838d35c0edcce4cfb1ed5d51d6f76504051eaaa3602d7d9a0b9af2fea12c6898d00abcb1226d68bb7cb35fbddbf44d09bfeecce445e9d6309604657055ed4594cfa645e8f316419cb3637e004fc0a22a0a751844572218b7da09fd7a7d0cc1147a91453af972a8155e8980bd54663fe1a8a4a302892f765357bd63dee0a9452ef74d6010c4e1861e56bf98bdeb155afa7a7c1062d13ace3efb894380fab2027e894c8fc1d3024b4f91b69d44746ef051bd74dcea054d3d6c705660ac9b54a22016d8ef1ff6b0bd394e5c1edb6305034a3c3b4d696c55a602fad3db24d5e7fdc8351ac10f5cfa799b0a59b98582c635efa3040b578e7280fdb23ae4e872c0764f94ec5d164e4b9825eda499d54f86fec9003d8db6f0cae10b75fc10499820a4880cce820c4af0e245d456e6df2c7a286865ebd5c839f6de5c1c0e8d732748c67b32385d0e5972fdf884a5994fe07509bf05a3ca422a2427ef4efa3566e8ddcd6e7befd671804c5168442a91e9b9c0acf0109149f8712a4a5b9992b79d0f62ee45f59c290adc0d2b4447889cf87564bfcc8c236e5bec2edf30dd875bf6a630bef5783901a0b13d5509938a77899cf80b2ed0ecbdd492ecab28bbccf7e39b76c7b96ca8adcabbf7dec26014e0c8d918e8b5966aa901df702bca3cd9fe93e90bca7992efd24208f6059eddf148bdba56b05edf75c7d327a3371b0dd9ad509253cc5957021041122e90490e3e20a319878afaa5f65b84d146941d59c655909d3efd9bfef951a2d5ce225496c875b2d76bb884f815f527ea52fcbe08187d30160c3ac58edda600adc887fe833434366d8d67cb2bbc373273c3b9c5219c12478d26bb9d3c4b64a81f0ee3d9ccac4c1c6e4de1c27d2683469f0de65cf34719430622697cfadd427c55d9d5b71ee94093814c6cae34b2707ef4b24db148acf8f2e5baf98f72c20c61723dcb82944b97abb7586ab97a907d58d2c9e52f039104e4865e0c75b02627b7574af209b24c8a4c49cb58705e0fbb26ea225b268fc3e3d1721e37e002f68b7df3658e7289c587d9b933f644e5b342a38cd724f1182172437fbcd5399b6f479ad562e2c8d1ab2e11bf82b579ce33ec158e4f8b00af7edabbf7cbb791c3851652359e7fd26968a1c895908929d74c62be087bd11d3861fd5baad533ed9fb915522263ee0707b19dfff64bfbedc99a2524833ec64a29781ca706e3ccfca778d2857e1be9a779bb6161de7befcbcac9f26562f01a69d5dcf5e43d12d5ee90ff32de378143cab3ea2645bd3e9acf58d0a57c732435f1c59c6c67dc57c79ed681c0c9f1f2aac256e1ece967ff7a0f233d142685aa1d0a7cd9b2707974b6e69951020d9534322949a57abeb5235e1d070a1e98e191968b9c79d989af38115e0c871a8734157692bf1ccc693621dab4036152779cc2966c09e5bc3e1a68396e7de75403d0d1d0c87b9fab0f3b7aebb6265933da87809bae95c98ec988873c12226bfe981d6d11fb258037a3d4e0714e0c6c96f5d25158acac580c8ad4601a1c09a98e7ba40e0aaf0e812fa7a25b241353678c4cf5597efbe0a5123053b29552ffe9eb37432377d4785a1b362e81de72f302fdb3dc0229436ddf4c0e90cc17dec52c7cc8238554a1225b9fcd5fe597ce0496271d21343f4bd3211a3c51f7f429ad0ed143450b22b925f9d2c9e53412e34b1db4449dabc7cc5e79396a00238cb65a97d533357983e9b6c8e620ce6b47240d1c97a10b7b91257062e870d11e9048fa59867472c758a574dd0d6ac60bd646008d060f3971c6cf4fa80fb2143fb14d860fd2d4a558453ab7918173867521b3feeb4036ddc600e4597084316d37e09bdc4e109b25899a4deb1005c894e1079a21dd92e8ca788391cf0951a9c20cc0844487da8a5b60d3e2723431b5becaa4ffcf5c5d1b42d8ff22c080c49f648794cf72aaf261afe82240971ec6d1b3092c5386dc0f7986de341743431602f1d6239208196523424be492bc1fa7e1af19f5ef1b27da7543f4a29d132fa74aa283c3377729e849810f3b370d712100884de5bdb3d22364720b455c2142a0d9bdb230ca5c2d93325087533187cfeb07e5efef57705cfd38234fd359c6bcad23339449e8233feacf225f46451f96b8a5bf6bedf9199fd5f9a8a8b92e41e144e9c28daabcd7d156f801e4342da13c9167a19e4ed47aaa36587ec262c2047a120af84d5bbb0500f8d56b0fff5a99d43f3954bb54f7a5eae7022cbc1526c7c4a9b500a63f14213c64c6fe411b32ae9b6297dbacc0d3f5a6ff774cf1ccddc83e624c2df83912e723503ded23917ac27b80000a403dcb28b68589f23b86c81a15d84f68ff2b5ecf85741cd698d959a78af6eaf37324200e9f0f3784aaf890fab89a7c51b9360f98a9a38e735ea3b11e32d74995d697269f0366eda2fffb2bec2fa174b31d90d597af097697f9dfbdb63c88cf6b8c2533dd49d16f4489c"}, @iv={0x20, 0x117, 0x2, 0xc, "3ce7bd3fdceb473ed2520cd8"}], 0x21a0, 0x44080}], 0x7, 0x20000010) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000001c0)={0x7, [0xfffa, 0x7f, 0x7f, 0x5, 0x8001, 0x988, 0x59db]}, 0x12) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000180), 0x10) r6 = dup2(r4, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r6, &(0x7f0000000280)={0x11e}, 0x269) getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 2640.112485] Bluetooth: hci0: Frame reassembly failed (-84) [ 2640.112546] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2640.135423] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2640.156279] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:00:40 executing program 3 (fault-call:3 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 04:00:40 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000c00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:00:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) 04:00:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:00:40 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b00, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2640.712233] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2640.737451] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2640.746441] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2640.782764] Bluetooth: hci1: Frame reassembly failed (-84) [ 2640.792801] FAULT_INJECTION: forcing a failure. [ 2640.792801] name failslab, interval 1, probability 0, space 0, times 0 [ 2640.804139] CPU: 1 PID: 12596 Comm: syz-executor.3 Not tainted 4.19.101-syzkaller #0 [ 2640.812032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2640.821406] Call Trace: [ 2640.824023] dump_stack+0x197/0x210 [ 2640.827678] should_fail.cold+0xa/0x1b [ 2640.831583] ? avc_has_perm_noaudit+0x38f/0x570 [ 2640.836270] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2640.841400] __should_failslab+0x121/0x190 [ 2640.845658] should_failslab+0x9/0x14 [ 2640.849480] kmem_cache_alloc_node+0x56/0x710 [ 2640.854006] ? __alloc_skb+0xd5/0x5f0 [ 2640.857832] ? kasan_unpoison_shadow+0x35/0x50 [ 2640.862469] __alloc_skb+0xd5/0x5f0 [ 2640.866119] ? skb_trim+0x190/0x190 [ 2640.869769] ? lock_acquire+0x16f/0x3f0 [ 2640.873947] ? kasan_check_write+0x14/0x20 [ 2640.878205] send_hcill_cmd+0x58/0x170 [ 2640.882111] ? _raw_spin_lock_irqsave+0x9d/0xcd [ 2640.886800] ll_recv_frame+0x2b9/0x3d0 [ 2640.890709] h4_recv_buf+0x491/0xde0 [ 2640.894451] ll_recv+0xe4/0x200 [ 2640.897751] hci_uart_tty_receive+0x225/0x530 [ 2640.902265] ? hci_uart_write_work+0x710/0x710 [ 2640.906868] tty_ioctl+0xe91/0x1510 [ 2640.910539] ? tty_vhangup+0x30/0x30 [ 2640.914238] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2640.914273] ? mark_held_locks+0x100/0x100 [ 2640.926127] ? proc_cwd_link+0x1a0/0x1d0 [ 2640.930216] ? __fget+0x340/0x540 [ 2640.933696] ? __might_sleep+0x95/0x190 [ 2640.937689] ? tty_vhangup+0x30/0x30 [ 2640.941422] do_vfs_ioctl+0xd5f/0x1380 [ 2640.945342] ? selinux_file_ioctl+0x46c/0x5d0 [ 2640.949849] ? selinux_file_ioctl+0x125/0x5d0 [ 2640.950365] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2640.954358] ? ioctl_preallocate+0x210/0x210 [ 2640.964557] ? selinux_file_mprotect+0x620/0x620 [ 2640.969338] ? iterate_fd+0x360/0x360 [ 2640.973161] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2640.978720] ? fput+0x128/0x1a0 [ 2640.982028] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2640.987583] ? security_file_ioctl+0x8d/0xc0 [ 2640.992007] ksys_ioctl+0xab/0xd0 [ 2640.994295] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2640.995479] __x64_sys_ioctl+0x73/0xb0 [ 2640.995501] do_syscall_64+0xfd/0x620 [ 2640.995521] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2640.995537] RIP: 0033:0x45b399 04:00:40 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:00:40 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000e00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:00:40 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2641.019174] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2641.032371] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2641.038078] RSP: 002b:00007ff96895cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2641.038094] RAX: ffffffffffffffda RBX: 00007ff96895d6d4 RCX: 000000000045b399 [ 2641.038104] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 2641.038114] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2641.038123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2641.038132] R13: 000000000000057e R14: 00000000004c6c95 R15: 0000000000000002 [ 2641.038159] Bluetooth: cannot allocate memory for HCILL packet [ 2641.038166] Bluetooth: cannot acknowledge device sleep 04:00:40 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3580, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2642.187706] Bluetooth: hci0: command 0x1003 tx timeout [ 2642.194478] Bluetooth: hci0: sending frame failed (-49) [ 2642.827749] Bluetooth: hci1: command 0x1003 tx timeout [ 2642.833159] Bluetooth: hci1: sending frame failed (-49) [ 2643.067766] Bluetooth: hci3: command 0x1003 tx timeout [ 2643.073162] Bluetooth: hci2: command 0x1003 tx timeout [ 2643.073210] Bluetooth: hci3: sending frame failed (-49) [ 2643.078609] Bluetooth: hci2: sending frame failed (-49) [ 2644.267737] Bluetooth: hci0: command 0x1001 tx timeout [ 2644.273155] Bluetooth: hci0: sending frame failed (-49) [ 2644.907768] Bluetooth: hci1: command 0x1001 tx timeout [ 2644.913170] Bluetooth: hci1: sending frame failed (-49) [ 2645.147751] Bluetooth: hci3: command 0x1001 tx timeout [ 2645.147860] Bluetooth: hci2: command 0x1001 tx timeout [ 2645.153166] Bluetooth: hci3: sending frame failed (-49) [ 2645.163738] Bluetooth: hci2: sending frame failed (-49) [ 2646.347760] Bluetooth: hci0: command 0x1009 tx timeout [ 2646.987808] Bluetooth: hci1: command 0x1009 tx timeout [ 2647.227746] Bluetooth: hci3: command 0x1009 tx timeout [ 2647.227796] Bluetooth: hci2: command 0x1009 tx timeout 04:00:49 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000f00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:00:50 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:00:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000140)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="de34f4389184364ce5016ac8e771f979b1740bbb35c5197de7a4557b17842ed6ea50c17ade2f76b189d44dc08c264f34732d6ab15d6502806ffc4c98e4e769b2d2b7f4d5343050a148ccc36728436edf40b92b1d", 0x54, 0xfffffffffffffffc) r3 = request_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000002c0)='\xe1\x00', 0xfffffffffffffffa) r4 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f00000003c0)=0x400, 0x4) keyctl$negate(0xd, r3, 0x0, r4) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) r7 = request_key(0x0, &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000002c0)='\xe1\x00', 0xfffffffffffffffa) keyctl$negate(0xd, r7, 0x0, 0x0) r8 = request_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000480)='\xb3\x06G\xa6\xb3\xfc', r7) keyctl$unlink(0x9, r8, r6) r9 = request_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='/dev/ptmx\x00', r8) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r9, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) [ 2650.328435] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2650.343581] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2650.352106] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2650.368046] Bluetooth: hci0: Frame reassembly failed (-84) [ 2650.375173] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 04:00:50 executing program 3 (fault-call:3 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 04:00:50 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2650.983508] FAULT_INJECTION: forcing a failure. [ 2650.983508] name failslab, interval 1, probability 0, space 0, times 0 [ 2650.994773] CPU: 0 PID: 12628 Comm: syz-executor.3 Not tainted 4.19.101-syzkaller #0 [ 2651.002696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2651.012043] Call Trace: [ 2651.014631] dump_stack+0x197/0x210 [ 2651.018263] should_fail.cold+0xa/0x1b [ 2651.022160] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2651.028482] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2651.033575] ? __lock_acquire+0x6ee/0x49c0 [ 2651.037797] ? find_held_lock+0x35/0x130 [ 2651.041851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2651.047377] ? should_fail+0x14d/0x85c [ 2651.051257] __should_failslab+0x121/0x190 [ 2651.055480] should_failslab+0x9/0x14 [ 2651.059267] kmem_cache_alloc_node_trace+0x5a/0x720 [ 2651.064322] ? __alloc_skb+0xd5/0x5f0 [ 2651.068154] __kmalloc_node_track_caller+0x3d/0x80 [ 2651.073243] __kmalloc_reserve.isra.0+0x40/0xf0 [ 2651.078024] __alloc_skb+0x10b/0x5f0 [ 2651.081725] ? skb_trim+0x190/0x190 [ 2651.085341] ? lock_acquire+0x16f/0x3f0 [ 2651.089301] ? kasan_check_write+0x14/0x20 [ 2651.093525] send_hcill_cmd+0x58/0x170 [ 2651.097401] ? _raw_spin_lock_irqsave+0x9d/0xcd [ 2651.102065] ll_recv_frame+0x2b9/0x3d0 [ 2651.105939] h4_recv_buf+0x491/0xde0 [ 2651.109641] ll_recv+0xe4/0x200 [ 2651.112916] hci_uart_tty_receive+0x225/0x530 [ 2651.117394] ? hci_uart_write_work+0x710/0x710 [ 2651.121966] tty_ioctl+0xe91/0x1510 [ 2651.125576] ? tty_vhangup+0x30/0x30 [ 2651.129275] ? mark_held_locks+0x100/0x100 [ 2651.133492] ? proc_cwd_link+0x1a0/0x1d0 [ 2651.137551] ? __fget+0x340/0x540 [ 2651.141012] ? __might_sleep+0x95/0x190 [ 2651.144971] ? tty_vhangup+0x30/0x30 [ 2651.148672] do_vfs_ioctl+0xd5f/0x1380 [ 2651.152562] ? selinux_file_ioctl+0x46c/0x5d0 [ 2651.157045] ? selinux_file_ioctl+0x125/0x5d0 [ 2651.161524] ? ioctl_preallocate+0x210/0x210 [ 2651.165918] ? selinux_file_mprotect+0x620/0x620 [ 2651.170661] ? iterate_fd+0x360/0x360 [ 2651.174468] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2651.179989] ? fput+0x128/0x1a0 [ 2651.183266] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2651.188806] ? security_file_ioctl+0x8d/0xc0 [ 2651.193199] ksys_ioctl+0xab/0xd0 [ 2651.196637] __x64_sys_ioctl+0x73/0xb0 [ 2651.200511] do_syscall_64+0xfd/0x620 [ 2651.204316] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2651.209502] RIP: 0033:0x45b399 [ 2651.212696] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2651.231599] RSP: 002b:00007ff96895cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2651.239306] RAX: ffffffffffffffda RBX: 00007ff96895d6d4 RCX: 000000000045b399 [ 2651.246561] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 2651.253848] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2651.261100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2651.268365] R13: 000000000000057e R14: 00000000004c6c95 R15: 0000000000000003 [ 2651.275668] Bluetooth: cannot allocate memory for HCILL packet [ 2651.281618] Bluetooth: cannot acknowledge device sleep [ 2651.288513] Bluetooth: hci1: Frame reassembly failed (-84) 04:00:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:00:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r6 = dup2(r5, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r6, &(0x7f0000000280)={0x11e}, 0x269) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f00000002c0)) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f00000001c0)) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000180)={0x1, 0x7, 0x400, 0x6, 'syz0\x00', 0x1}) 04:00:51 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06001000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:00:51 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:00:51 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2651.619343] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2651.650714] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:00:51 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06004800a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2651.671415] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2651.686835] Bluetooth: hci2: Frame reassembly failed (-84) [ 2651.702588] Bluetooth: hci3: Frame reassembly failed (-84) [ 2651.715504] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 04:00:51 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:00:51 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06004c00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2651.771155] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2651.780129] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2651.790970] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:00:51 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2651.893772] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2652.427709] Bluetooth: hci0: command 0x1003 tx timeout [ 2652.433341] Bluetooth: hci0: sending frame failed (-49) [ 2653.307703] Bluetooth: hci1: command 0x1003 tx timeout [ 2653.313246] Bluetooth: hci1: sending frame failed (-49) [ 2653.707778] Bluetooth: hci2: command 0x1003 tx timeout [ 2653.713259] Bluetooth: hci2: sending frame failed (-49) [ 2653.718834] Bluetooth: hci3: command 0x1003 tx timeout [ 2653.724217] Bluetooth: hci3: sending frame failed (-49) [ 2654.507746] Bluetooth: hci0: command 0x1001 tx timeout [ 2654.513185] Bluetooth: hci0: sending frame failed (-49) [ 2655.387754] Bluetooth: hci1: command 0x1001 tx timeout [ 2655.393225] Bluetooth: hci1: sending frame failed (-49) [ 2655.787826] Bluetooth: hci3: command 0x1001 tx timeout [ 2655.793239] Bluetooth: hci2: command 0x1001 tx timeout [ 2655.793300] Bluetooth: hci3: sending frame failed (-49) [ 2655.799837] Bluetooth: hci2: sending frame failed (-49) [ 2656.587745] Bluetooth: hci0: command 0x1009 tx timeout [ 2657.467848] Bluetooth: hci1: command 0x1009 tx timeout [ 2657.867760] Bluetooth: hci3: command 0x1009 tx timeout [ 2657.867777] Bluetooth: hci2: command 0x1009 tx timeout 04:01:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) [ 2660.554249] Bluetooth: hci0: Frame reassembly failed (-84) [ 2660.554535] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 04:01:00 executing program 3 (fault-call:3 fault-nth:4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 04:01:00 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2661.220472] Bluetooth: hci1: Frame reassembly failed (-84) 04:01:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:01:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x501400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:01:01 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06006000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:01:01 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:01:01 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6488, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2661.859023] validate_nla: 2 callbacks suppressed [ 2661.859035] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:01:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:01:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) [ 2661.908132] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2661.915704] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:01:01 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06006800a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:01:01 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2662.022314] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2662.025436] Bluetooth: hci2: Frame reassembly failed (-84) [ 2662.137934] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2662.145720] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2662.156026] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2662.587722] Bluetooth: hci0: command 0x1003 tx timeout [ 2662.593284] Bluetooth: hci0: sending frame failed (-49) [ 2663.237815] Bluetooth: hci1: command 0x1003 tx timeout [ 2663.243306] Bluetooth: hci1: sending frame failed (-49) [ 2664.027708] Bluetooth: hci2: command 0x1003 tx timeout [ 2664.033150] Bluetooth: hci2: sending frame failed (-49) [ 2664.667739] Bluetooth: hci0: command 0x1001 tx timeout [ 2664.673146] Bluetooth: hci0: sending frame failed (-49) [ 2665.307758] Bluetooth: hci1: command 0x1001 tx timeout [ 2665.313197] Bluetooth: hci1: sending frame failed (-49) [ 2666.107765] Bluetooth: hci2: command 0x1001 tx timeout [ 2666.113146] Bluetooth: hci2: sending frame failed (-49) [ 2666.757821] Bluetooth: hci0: command 0x1009 tx timeout [ 2667.387740] Bluetooth: hci1: command 0x1009 tx timeout [ 2668.187794] Bluetooth: hci2: command 0x1009 tx timeout 04:01:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:01:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 04:01:11 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:01:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/4096) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 04:01:11 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06006c00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:01:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:01:11 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2671.433720] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2671.457177] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2671.467439] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2671.468048] Bluetooth: hci0: Frame reassembly failed (-84) 04:01:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 2671.493855] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2671.510847] Bluetooth: hci1: Frame reassembly failed (-84) 04:01:11 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06007400a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2671.623723] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2671.632009] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2671.641505] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:01:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:01:11 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:01:11 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06007a00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:01:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x8a800, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)={0x80000001, 0x4, 0x4, 0x400, 0x4, {}, {0x4, 0x8, 0x8, 0x0, 0x3, 0x0, "2c628c68"}, 0xffffffff, 0x2, @userptr=0x78, 0xfff, 0x0, r3}) r5 = dup2(r1, 0xffffffffffffffff) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000240)={0x8057}) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000fed000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0)="67289b561ea1102b2458a6e4837968fd5d9cf62471868ad1bade2b1fe2b27b8f922231a7031bc68c267570dc9e4c305f12316c47ce85f04550cfb336e65da4fcb3ccb217bd4a5654a25d54e5e8c9f8cf9c5b5019a89ac7731307591472ae91b986499de36cfc51fb99215a4ef9007be3b96f543a34d18aebdeb1c83dfad5291c6102930b89f2e2462426e29f6d4894f12fb7ae1588351f68c0d96e2730e707", 0x9f, r6}, 0x68) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r5, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xc) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 2672.081947] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2672.099872] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2672.135727] Bluetooth: hci2: Frame reassembly failed (-84) [ 2672.145777] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2672.157828] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2673.467789] Bluetooth: hci0: command 0x1003 tx timeout [ 2673.473215] Bluetooth: hci0: sending frame failed (-49) [ 2673.547832] Bluetooth: hci1: command 0x1003 tx timeout [ 2673.553248] Bluetooth: hci1: sending frame failed (-49) [ 2674.187748] Bluetooth: hci2: command 0x1003 tx timeout [ 2674.193268] Bluetooth: hci2: sending frame failed (-49) [ 2675.547765] Bluetooth: hci0: command 0x1001 tx timeout [ 2675.553216] Bluetooth: hci0: sending frame failed (-49) [ 2675.627882] Bluetooth: hci1: command 0x1001 tx timeout [ 2675.633309] Bluetooth: hci1: sending frame failed (-49) [ 2676.267744] Bluetooth: hci2: command 0x1001 tx timeout [ 2676.273442] Bluetooth: hci2: sending frame failed (-49) [ 2677.627957] Bluetooth: hci0: command 0x1009 tx timeout [ 2677.707807] Bluetooth: hci1: command 0x1009 tx timeout [ 2678.347738] Bluetooth: hci2: command 0x1009 tx timeout 04:01:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x2, &(0x7f0000000000)=0x30) 04:01:21 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:01:21 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) 04:01:21 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600f000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:01:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2103, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x8005) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3, 0x0, 0x40}, 0x20) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0xd, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0080020001000000"], &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000140)=r8, 0x4) [ 2681.693217] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2681.716177] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:01:21 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:01:21 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) [ 2681.738634] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2681.762612] Bluetooth: hci0: Frame reassembly failed (-84) 04:01:21 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600fc00a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:01:21 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:01:21 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) [ 2681.932282] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2681.955651] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:01:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 2681.984917] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:01:21 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600d001a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2682.302018] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2682.310174] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2682.317825] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2683.787772] Bluetooth: hci0: command 0x1003 tx timeout [ 2683.794867] Bluetooth: hci0: sending frame failed (-49) [ 2685.877729] Bluetooth: hci0: command 0x1001 tx timeout [ 2685.884093] Bluetooth: hci0: sending frame failed (-49) [ 2687.947735] Bluetooth: hci0: command 0x1009 tx timeout 04:01:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x4b47, &(0x7f0000000000)=0x30) 04:01:31 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:01:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000002c0)=0x3ff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket(0xff98da811edeae49, 0x803, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup2(r4, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r5, &(0x7f0000000280)={0x11e}, 0x269) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f0000000240)) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x1, 0x8, 0x3, 0x0, 0x0, {0xe, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xda}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x805}, 0x24000800) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ocfs2_control\x00', 0x4000, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, r7, 0x200, 0x70bd2a}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) r8 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r9 = dup2(r8, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r9, &(0x7f0000000280)={0x11e}, 0x269) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r7, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x2000c004) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 04:01:31 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002840)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000002880)=0x9, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) dup3(r1, r1, 0x80000) 04:01:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:01:31 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000003a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:01:31 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2691.946446] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2691.951735] Bluetooth: hci0: Frame reassembly failed (-84) [ 2691.958846] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2691.972567] Bluetooth: hci1: Frame reassembly failed (-84) [ 2691.978964] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 04:01:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 2691.993229] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2692.006357] Bluetooth: hci2: Frame reassembly failed (-84) 04:01:31 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:01:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 2692.050328] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:01:31 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000005a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:01:31 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2692.251259] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2692.263150] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2692.284008] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2693.957809] Bluetooth: hci0: command 0x1003 tx timeout [ 2693.963258] Bluetooth: hci0: sending frame failed (-49) [ 2694.027739] Bluetooth: hci2: command 0x1003 tx timeout [ 2694.033275] Bluetooth: hci2: sending frame failed (-49) [ 2694.038845] Bluetooth: hci1: command 0x1003 tx timeout [ 2694.044281] Bluetooth: hci1: sending frame failed (-49) [ 2696.027802] Bluetooth: hci0: command 0x1001 tx timeout [ 2696.033228] Bluetooth: hci0: sending frame failed (-49) [ 2696.107757] Bluetooth: hci1: command 0x1001 tx timeout [ 2696.113139] Bluetooth: hci2: command 0x1001 tx timeout [ 2696.113160] Bluetooth: hci1: sending frame failed (-49) [ 2696.118991] Bluetooth: hci2: sending frame failed (-49) [ 2698.107789] Bluetooth: hci0: command 0x1009 tx timeout [ 2698.187728] Bluetooth: hci1: command 0x1009 tx timeout [ 2698.197726] Bluetooth: hci2: command 0x1009 tx timeout 04:01:41 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:01:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x4b49, &(0x7f0000000000)=0x30) 04:01:41 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000006a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:01:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:01:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0xd8200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 04:01:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x206c41, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x9) ioctl$KDADDIO(r0, 0x400455c8, 0x7c) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 2702.170072] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:01:41 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:01:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 2702.250254] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2702.285753] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2702.293641] Bluetooth: hci0: Frame reassembly failed (-84) 04:01:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f00000000c0)) 04:01:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="080000000010709abc8ddefcd0db5f8110d812a940b1a1d04aac7e46e3540d0000000000005b21bf70cfa80ec47cde8e0f06fe90d5aeeddc9a9133e8ffb9d99afbe92030a1d721abaf6e7224a829e00e2d4429d7b4b20235ee7acc8761a48aec9ed45770f0db902d2ebb70b32441df8f11361403747dda7891080978f45eb327c511ecc3bc5f1d8cd3d42d87ea8948b3808df398caa1f8f5b71fd88efe37fd8dbe69c91c243f32915b7340598e6a71ff"]) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000001c0)=0xffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 04:01:42 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000007a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:01:42 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2702.481465] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2702.486283] Bluetooth: hci1: Frame reassembly failed (-84) [ 2702.511138] Bluetooth: hci2: Frame reassembly failed (-84) [ 2702.520979] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2702.522330] Bluetooth: hci2: Frame reassembly failed (-84) 04:01:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 2702.566572] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2702.592852] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2702.607031] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2704.347724] Bluetooth: hci0: command 0x1003 tx timeout [ 2704.353247] Bluetooth: hci0: sending frame failed (-49) [ 2704.507933] Bluetooth: hci1: command 0x1003 tx timeout [ 2704.513360] Bluetooth: hci1: sending frame failed (-49) [ 2704.587754] Bluetooth: hci2: command 0x1003 tx timeout [ 2704.593157] Bluetooth: hci2: sending frame failed (-49) [ 2706.427732] Bluetooth: hci0: command 0x1001 tx timeout [ 2706.433172] Bluetooth: hci0: sending frame failed (-49) [ 2706.587817] Bluetooth: hci1: command 0x1001 tx timeout [ 2706.594089] Bluetooth: hci1: sending frame failed (-49) [ 2706.667755] Bluetooth: hci2: command 0x1001 tx timeout [ 2706.673228] Bluetooth: hci2: sending frame failed (-49) [ 2708.507777] Bluetooth: hci0: command 0x1009 tx timeout [ 2708.667815] Bluetooth: hci1: command 0x1009 tx timeout [ 2708.747776] Bluetooth: hci2: command 0x1009 tx timeout 04:01:52 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:01:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:01:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5409, &(0x7f0000000000)=0x30) 04:01:52 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600d408a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:01:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 2712.391737] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2712.430701] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:01:52 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2712.453297] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:01:52 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600000aa84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2712.574017] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2712.582034] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2712.594445] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:01:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:01:52 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600000ca84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:01:52 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8060000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:01:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:01:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) setsockopt$inet_dccp_int(r4, 0x21, 0x6, &(0x7f0000000180)=0x3f, 0x4) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) r5 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r6 = dup2(r5, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r6, &(0x7f0000000280)={0x11e}, 0x269) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x2a, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x2}, 0x0, 0x0, &(0x7f0000000240)={0x4, 0x4, 0x5, 0x8}, &(0x7f00000002c0)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0xf59}}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) [ 2713.030710] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:01:52 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2713.077816] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2713.098608] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2713.124933] Bluetooth: hci1: Frame reassembly failed (-84) [ 2713.144559] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2713.150087] Bluetooth: hci2: Frame reassembly failed (-84) [ 2714.507874] Bluetooth: hci0: command 0x1003 tx timeout [ 2714.513405] Bluetooth: hci0: sending frame failed (-49) [ 2715.147736] Bluetooth: hci2: command 0x1003 tx timeout [ 2715.147819] Bluetooth: hci1: command 0x1003 tx timeout [ 2715.155026] Bluetooth: hci2: sending frame failed (-49) [ 2715.163938] Bluetooth: hci1: sending frame failed (-49) [ 2716.587729] Bluetooth: hci0: command 0x1001 tx timeout [ 2716.593148] Bluetooth: hci0: sending frame failed (-49) [ 2717.227759] Bluetooth: hci1: command 0x1001 tx timeout [ 2717.227845] Bluetooth: hci2: command 0x1001 tx timeout [ 2717.233218] Bluetooth: hci1: sending frame failed (-49) [ 2717.239104] Bluetooth: hci2: sending frame failed (-49) [ 2718.668066] Bluetooth: hci0: command 0x1009 tx timeout [ 2719.307772] Bluetooth: hci1: command 0x1009 tx timeout [ 2719.307839] Bluetooth: hci2: command 0x1009 tx timeout 04:02:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x540b, &(0x7f0000000000)=0x30) 04:02:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:02:02 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600000ea84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:02:02 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:02:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:02:02 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2722.634559] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2722.656894] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2722.707914] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:02:02 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600000fa84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:02:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:02:02 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2722.875032] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2722.890699] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2722.899030] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:02:02 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:02:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:02:02 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000020a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2723.300437] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2723.336565] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2723.357929] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2724.747945] Bluetooth: hci0: command 0x1003 tx timeout [ 2724.753573] Bluetooth: hci0: sending frame failed (-49) [ 2726.828097] Bluetooth: hci0: command 0x1001 tx timeout [ 2726.833619] Bluetooth: hci0: sending frame failed (-49) [ 2728.907813] Bluetooth: hci0: command 0x1009 tx timeout 04:02:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x540c, &(0x7f0000000000)=0x30) 04:02:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x7, r4, 0x8}, 0x10) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_MAC={0xa, 0x6, @random="58893e832492"}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 04:02:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f00000000c0)={0x2, 0xffffffff}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) ioctl$VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:02:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:02:12 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:02:12 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600003fa84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2732.884923] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2732.905038] Bluetooth: hci0: Frame reassembly failed (-84) [ 2732.911084] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2732.921205] Bluetooth: hci1: Frame reassembly failed (-84) 04:02:12 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:02:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 2732.930704] Bluetooth: hci1: Frame reassembly failed (-84) [ 2732.936878] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2732.946522] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2732.964750] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:02:12 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000040a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:02:12 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:02:12 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:02:12 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000048a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2733.106266] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2733.130080] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2733.146320] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2733.244182] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2733.251866] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2733.260611] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2734.907722] Bluetooth: hci0: command 0x1003 tx timeout [ 2734.913213] Bluetooth: hci0: sending frame failed (-49) [ 2734.997740] Bluetooth: hci2: command 0x1003 tx timeout [ 2735.003161] Bluetooth: hci1: command 0x1003 tx timeout [ 2735.003203] Bluetooth: hci2: sending frame failed (-49) [ 2735.008677] Bluetooth: hci1: sending frame failed (-49) [ 2735.148064] Bluetooth: hci3: command 0x1003 tx timeout [ 2735.153551] Bluetooth: hci3: sending frame failed (-49) [ 2736.987793] Bluetooth: hci0: command 0x1001 tx timeout [ 2736.993181] Bluetooth: hci0: sending frame failed (-49) [ 2737.067771] Bluetooth: hci2: command 0x1001 tx timeout [ 2737.073174] Bluetooth: hci2: sending frame failed (-49) [ 2737.079175] Bluetooth: hci1: command 0x1001 tx timeout [ 2737.084598] Bluetooth: hci1: sending frame failed (-49) [ 2737.227981] Bluetooth: hci3: command 0x1001 tx timeout [ 2737.233478] Bluetooth: hci3: sending frame failed (-49) [ 2739.067758] Bluetooth: hci0: command 0x1009 tx timeout [ 2739.147779] Bluetooth: hci1: command 0x1009 tx timeout [ 2739.153147] Bluetooth: hci2: command 0x1009 tx timeout [ 2739.307868] Bluetooth: hci3: command 0x1009 tx timeout 04:02:22 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:02:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x540d, &(0x7f0000000000)=0x30) 04:02:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:02:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) fadvise64(r1, 0x5, 0x9, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x2, 0x80000000, 0x7, 0x8001, 0x17, "9bada3fa41fd948ba2c5956c9f1c1382fb21b4"}) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) ioctl$KDDISABIO(r3, 0x4b37) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 04:02:22 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600004ca84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2743.159506] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2743.174465] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2743.178755] Bluetooth: hci0: Frame reassembly failed (-84) 04:02:22 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:02:22 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06006558a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2743.211485] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2743.221144] Bluetooth: hci1: Frame reassembly failed (-84) [ 2743.224600] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2743.234842] Bluetooth: hci2: Frame reassembly failed (-84) [ 2743.235916] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2743.335602] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2743.343667] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2743.352493] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:02:23 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:02:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) 04:02:23 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000060a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:02:23 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2743.754924] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2743.786773] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:02:23 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06005865a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:02:23 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2743.800087] Bluetooth: hci3: Frame reassembly failed (-84) [ 2743.815885] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2743.887341] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2745.237715] Bluetooth: hci1: command 0x1003 tx timeout [ 2745.243187] Bluetooth: hci0: command 0x1003 tx timeout [ 2745.243223] Bluetooth: hci1: sending frame failed (-49) [ 2745.254087] Bluetooth: hci0: sending frame failed (-49) [ 2745.307819] Bluetooth: hci2: command 0x1003 tx timeout [ 2745.313272] Bluetooth: hci2: sending frame failed (-49) [ 2745.867814] Bluetooth: hci3: command 0x1003 tx timeout [ 2745.873523] Bluetooth: hci3: sending frame failed (-49) [ 2747.307759] Bluetooth: hci0: command 0x1001 tx timeout [ 2747.307776] Bluetooth: hci1: command 0x1001 tx timeout [ 2747.313193] Bluetooth: hci0: sending frame failed (-49) [ 2747.323878] Bluetooth: hci1: sending frame failed (-49) [ 2747.387807] Bluetooth: hci2: command 0x1001 tx timeout [ 2747.393227] Bluetooth: hci2: sending frame failed (-49) [ 2747.947739] Bluetooth: hci3: command 0x1001 tx timeout [ 2747.953152] Bluetooth: hci3: sending frame failed (-49) [ 2749.387747] Bluetooth: hci1: command 0x1009 tx timeout [ 2749.387782] Bluetooth: hci0: command 0x1009 tx timeout [ 2749.467834] Bluetooth: hci2: command 0x1009 tx timeout [ 2750.027736] Bluetooth: hci3: command 0x1009 tx timeout 04:02:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5413, &(0x7f0000000000)=0x30) 04:02:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x22ac00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) r3 = gettid() ptrace(0x10, r3) r4 = getpgrp(r3) ptrace(0x4208, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x8001) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4004000) 04:02:33 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000068a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:02:33 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e0000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2753.479142] validate_nla: 2 callbacks suppressed [ 2753.479152] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2753.496973] Bluetooth: hci0: Frame reassembly failed (-84) 04:02:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000240)={"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"}) accept$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:02:33 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80350000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2753.599017] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:02:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x2, 'sit0\x00', {0x8ab}, 0x4}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) [ 2753.640951] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2753.793354] Bluetooth: hci1: Frame reassembly failed (-84) 04:02:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) 04:02:33 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:02:33 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600006ca84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:02:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x404c0) [ 2754.013292] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2754.033042] Bluetooth: hci2: Frame reassembly failed (-84) [ 2754.038385] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2754.039923] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2754.046248] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:02:33 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2754.104708] Bluetooth: hci3: Frame reassembly failed (-84) [ 2755.547769] Bluetooth: hci0: command 0x1003 tx timeout [ 2755.553255] Bluetooth: hci0: sending frame failed (-49) [ 2755.867875] Bluetooth: hci1: command 0x1003 tx timeout [ 2755.873320] Bluetooth: hci1: sending frame failed (-49) [ 2756.108019] Bluetooth: hci3: command 0x1003 tx timeout [ 2756.113348] Bluetooth: hci2: command 0x1003 tx timeout [ 2756.113497] Bluetooth: hci3: sending frame failed (-49) [ 2756.119210] Bluetooth: hci2: sending frame failed (-49) [ 2757.627780] Bluetooth: hci0: command 0x1001 tx timeout [ 2757.633197] Bluetooth: hci0: sending frame failed (-49) [ 2757.947799] Bluetooth: hci1: command 0x1001 tx timeout [ 2757.953179] Bluetooth: hci1: sending frame failed (-49) [ 2758.187831] Bluetooth: hci3: command 0x1001 tx timeout [ 2758.188027] Bluetooth: hci2: command 0x1001 tx timeout [ 2758.198436] Bluetooth: hci3: sending frame failed (-49) [ 2758.204063] Bluetooth: hci2: sending frame failed (-49) [ 2759.707788] Bluetooth: hci0: command 0x1009 tx timeout [ 2760.028006] Bluetooth: hci1: command 0x1009 tx timeout [ 2760.267720] Bluetooth: hci2: command 0x1009 tx timeout [ 2760.273111] Bluetooth: hci3: command 0x1009 tx timeout 04:02:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5414, &(0x7f0000000000)=0x30) 04:02:43 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:02:43 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000074a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:02:43 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:02:43 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600007aa84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2763.578349] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2763.585954] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2763.596487] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2763.668228] Bluetooth: hci0: Frame reassembly failed (-84) [ 2763.692070] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2763.702757] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:02:43 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2763.714913] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:02:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) lsetxattr$security_selinux(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:ld_so_t:s0\x00', 0x1d, 0x2) 04:02:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='/dev/ptmx\x00') 04:02:43 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600fe80a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:02:43 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:02:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) [ 2764.262890] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:02:44 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2764.304868] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2764.346177] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2764.347813] Bluetooth: hci1: Frame reassembly failed (-84) [ 2764.363826] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2765.707767] Bluetooth: hci0: command 0x1003 tx timeout [ 2765.713422] Bluetooth: hci0: sending frame failed (-49) [ 2766.348082] Bluetooth: hci1: command 0x1003 tx timeout [ 2766.353782] Bluetooth: hci2: command 0x1003 tx timeout [ 2766.353807] Bluetooth: hci1: sending frame failed (-49) [ 2766.364972] Bluetooth: hci2: sending frame failed (-49) [ 2766.427853] Bluetooth: hci3: command 0x1003 tx timeout [ 2766.433467] Bluetooth: hci3: sending frame failed (-49) [ 2767.787812] Bluetooth: hci0: command 0x1001 tx timeout [ 2767.793681] Bluetooth: hci0: sending frame failed (-49) [ 2768.427822] Bluetooth: hci2: command 0x1001 tx timeout [ 2768.433988] Bluetooth: hci1: command 0x1001 tx timeout [ 2768.434098] Bluetooth: hci2: sending frame failed (-49) [ 2768.448797] Bluetooth: hci1: sending frame failed (-49) [ 2768.507782] Bluetooth: hci3: command 0x1001 tx timeout [ 2768.513441] Bluetooth: hci3: sending frame failed (-49) [ 2769.877813] Bluetooth: hci0: command 0x1009 tx timeout [ 2770.507970] Bluetooth: hci1: command 0x1009 tx timeout [ 2770.513459] Bluetooth: hci2: command 0x1009 tx timeout [ 2770.587978] Bluetooth: hci3: command 0x1009 tx timeout 04:02:53 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000081a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:02:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5415, &(0x7f0000000000)=0x30) 04:02:53 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:02:53 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89ffffff, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2773.820573] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2773.838984] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2773.847439] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2773.862874] Bluetooth: hci0: Frame reassembly failed (-84) 04:02:53 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600fec0a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:02:53 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2773.963727] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2773.971668] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2773.980776] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:02:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000002c0)="11dd08948350cf6eb45f9f9d7f7b8263612d684692e1c60be4f768196809ab6bd1facd74512b9ba69f73af5ee3e87e01d8b7901e50d1cac1de0cd7c49939f86aaacaba98f7ef46c0c7e2dc43b8ad9ee258ad81f135e5c7f0d54a32ab453b7791aa1edcb80ab9226c6ada0b61cdb5828ae66baadc", 0x74}, {&(0x7f0000000340)="c1ed33f344d0f02f572b2d302e93ad682b00199eda9dcf8af395ce5663fc8a51546c49b117ae32a9cbb072804881db9552be2e4088b307260014f0e9db52784ebf57b725b05a445d0af11547960fb595f281695df89ebb135a6fb1e4a1390398ed39fdc929db19903b3680273ae007814e5f37bee743c933ec14f0da828875dde29279a1d3743c87a0c97d5bb9daa82add8b097a9aee531bdc0d", 0x9a}], 0x2, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x10010, r2, 0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000400)=0x4883) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x3) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r5, &(0x7f0000000280)={0x11e}, 0x269) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f00000001c0)=""/100) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r7 = dup2(r6, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) setsockopt(r7, 0x101, 0x7fff, &(0x7f0000000100)="28751faf4d5d5b81cb2cf5907b743da32c48c5bdcd55f1872da6cba3fd8c647869ca163f8f2c865b2bbd8637ef90eebc8ba98dcae1c9442e21bc8283b47396634f51104e7e1c44f9d474afd1daca98db484b64f385acd79a8e4b0f00ed8699b7b32973b796c8f8aceea5579863737f98ac89292e6942ef", 0x77) r8 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r9 = dup2(r8, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r9, &(0x7f0000000280)={0x11e}, 0x269) ioctl$VIDIOC_G_FBUF(r9, 0x8030560a, &(0x7f0000000180)={0x80, 0x8, &(0x7f00000006c0)="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", {0x3, 0xfff, 0x31324d59, 0x6, 0x9, 0x367a, 0x1, 0x4}}) 04:02:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, 0x0) 04:02:54 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a060001d0a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:02:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20881) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x805, 0x0, 0x1, 'queue1\x00', 0xbe}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xbb) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000240)={0x0, 0x10000, 0x9, r5, 0x0, &(0x7f0000000140)={0x98091a, 0x1, [], @value64=0x80}}) 04:02:54 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2774.529752] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2774.581105] Bluetooth: hci1: Frame reassembly failed (-84) [ 2774.581528] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2774.601286] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2774.608773] Bluetooth: hci2: Frame reassembly failed (-84) [ 2774.614365] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 04:02:54 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:02:54 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a060008d4a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2774.633519] Bluetooth: hci3: Frame reassembly failed (-84) [ 2774.634742] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2774.726984] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2775.867795] Bluetooth: hci0: command 0x1003 tx timeout [ 2775.873220] Bluetooth: hci0: sending frame failed (-49) [ 2776.587850] Bluetooth: hci1: command 0x1003 tx timeout [ 2776.593344] Bluetooth: hci1: sending frame failed (-49) [ 2776.667819] Bluetooth: hci3: command 0x1003 tx timeout [ 2776.673257] Bluetooth: hci2: command 0x1003 tx timeout [ 2776.673297] Bluetooth: hci3: sending frame failed (-49) [ 2776.684128] Bluetooth: hci2: sending frame failed (-49) [ 2777.957771] Bluetooth: hci0: command 0x1001 tx timeout [ 2777.963205] Bluetooth: hci0: sending frame failed (-49) [ 2778.667802] Bluetooth: hci1: command 0x1001 tx timeout [ 2778.673206] Bluetooth: hci1: sending frame failed (-49) [ 2778.747777] Bluetooth: hci2: command 0x1001 tx timeout [ 2778.747821] Bluetooth: hci3: command 0x1001 tx timeout [ 2778.758548] Bluetooth: hci2: sending frame failed (-49) [ 2778.764126] Bluetooth: hci3: sending frame failed (-49) [ 2780.027810] Bluetooth: hci0: command 0x1009 tx timeout [ 2780.747776] Bluetooth: hci1: command 0x1009 tx timeout [ 2780.827873] Bluetooth: hci3: command 0x1009 tx timeout [ 2780.833257] Bluetooth: hci2: command 0x1009 tx timeout 04:03:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5416, &(0x7f0000000000)=0x30) 04:03:03 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:03:03 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a060000f0a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:03:03 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdd86, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2784.066499] validate_nla: 2 callbacks suppressed [ 2784.066510] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2784.086937] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2784.097166] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:03:03 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a060000fca84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2784.134699] Bluetooth: hci0: Frame reassembly failed (-84) [ 2784.198607] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2784.206241] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2784.214093] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:03:04 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:03:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, 0x0) 04:03:04 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a060080fea84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:03:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) r5 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r6 = dup2(r5, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r6, &(0x7f0000000280)={0x11e}, 0x269) ioctl$KDADDIO(r6, 0x400455c8, 0x64291f66) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 04:03:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@rand_addr="dabac5f42a6ba5b6b8f9bc458bff2958", 0x2000008, 0x0, 0x1, 0x3, 0x0, 0xef2}, 0x20) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xff, 0x0, 0x40, 0x5}, 0x8) r3 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, r3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000001c0)) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup2(r4, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0xd, &(0x7f0000000080)={r9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000200)={0x9, 0x20a, 0x430, 0x7, r10}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r5, &(0x7f0000000280)={0x11e}, 0x269) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000100)=0xffffffff, 0x4) [ 2784.773871] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:03:04 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff89, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2784.839016] Bluetooth: hci1: Frame reassembly failed (-84) [ 2784.839686] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:03:04 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2784.879566] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2784.902260] Bluetooth: hci2: Frame reassembly failed (-84) [ 2784.921471] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2786.197760] Bluetooth: hci0: command 0x1003 tx timeout [ 2786.203266] Bluetooth: hci0: sending frame failed (-49) [ 2786.907768] Bluetooth: hci2: command 0x1003 tx timeout [ 2786.913398] Bluetooth: hci1: command 0x1003 tx timeout [ 2786.913430] Bluetooth: hci2: sending frame failed (-49) [ 2786.923425] Bluetooth: hci1: sending frame failed (-49) [ 2788.267811] Bluetooth: hci0: command 0x1001 tx timeout [ 2788.273223] Bluetooth: hci0: sending frame failed (-49) [ 2788.987806] Bluetooth: hci1: command 0x1001 tx timeout [ 2788.987934] Bluetooth: hci2: command 0x1001 tx timeout [ 2788.993196] Bluetooth: hci1: sending frame failed (-49) [ 2788.999124] Bluetooth: hci2: sending frame failed (-49) [ 2790.347791] Bluetooth: hci0: command 0x1009 tx timeout [ 2791.067877] Bluetooth: hci1: command 0x1009 tx timeout [ 2791.067936] Bluetooth: hci2: command 0x1009 tx timeout 04:03:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5418, &(0x7f0000000000)=0x30) 04:03:13 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600c0fea84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:03:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) 04:03:13 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2794.309563] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2794.333430] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2794.336363] Bluetooth: hci0: Frame reassembly failed (-84) [ 2794.345245] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:03:14 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:03:14 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a060000ffa84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2794.362370] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2794.439143] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2794.448097] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2794.458385] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:03:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, 0x0) 04:03:14 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:03:14 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000644306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:03:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyprintk\x00', 0x200000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:03:14 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2794.968275] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2794.980180] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:03:14 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000002a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2795.029378] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2795.138621] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2796.347804] Bluetooth: hci0: command 0x1003 tx timeout [ 2796.353412] Bluetooth: hci0: sending frame failed (-49) [ 2796.427796] Bluetooth: hci3: command 0x1003 tx timeout [ 2796.433283] Bluetooth: hci3: sending frame failed (-49) [ 2797.067744] Bluetooth: hci1: command 0x1003 tx timeout [ 2797.073214] Bluetooth: hci1: sending frame failed (-49) [ 2798.437784] Bluetooth: hci0: command 0x1001 tx timeout [ 2798.443229] Bluetooth: hci0: sending frame failed (-49) [ 2798.507865] Bluetooth: hci3: command 0x1001 tx timeout [ 2798.513261] Bluetooth: hci3: sending frame failed (-49) [ 2799.147739] Bluetooth: hci1: command 0x1001 tx timeout [ 2799.153205] Bluetooth: hci1: sending frame failed (-49) [ 2800.507825] Bluetooth: hci0: command 0x1009 tx timeout [ 2800.587784] Bluetooth: hci3: command 0x1009 tx timeout [ 2801.227807] Bluetooth: hci1: command 0x1009 tx timeout 04:03:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x541b, &(0x7f0000000000)=0x30) 04:03:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000100)={{0x2, 0x0, @identifier="6efb04078a65d026a8b76e02232be819"}}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:03:24 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000003a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:03:24 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:03:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x181400, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000540)={0x1, 0x0, 0xd, 0x7, 0x4c, &(0x7f0000000140)}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) [ 2804.597584] validate_nla: 2 callbacks suppressed [ 2804.606489] Bluetooth: hci0: Frame reassembly failed (-84) [ 2804.612782] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2804.621834] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2804.630354] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2804.638480] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:03:24 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x4}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2804.661732] Bluetooth: hci2: Frame reassembly failed (-84) [ 2804.674397] Bluetooth: hci3: Frame reassembly failed (-84) [ 2804.684936] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 04:03:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 04:03:24 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000004a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:03:24 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x6}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:03:24 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2805.197285] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2805.214071] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2805.228834] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:03:24 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000005a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:03:25 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x8}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2805.247439] Bluetooth: hci1: Frame reassembly failed (-84) [ 2805.247574] Bluetooth: hci1: Frame reassembly failed (-84) [ 2805.338195] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2805.350961] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2805.363843] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2806.667944] Bluetooth: hci2: command 0x1003 tx timeout [ 2806.674991] Bluetooth: hci2: sending frame failed (-49) [ 2806.680489] Bluetooth: hci0: command 0x1003 tx timeout [ 2806.685865] Bluetooth: hci0: sending frame failed (-49) [ 2806.747742] Bluetooth: hci3: command 0x1003 tx timeout [ 2806.753406] Bluetooth: hci3: sending frame failed (-49) [ 2807.307729] Bluetooth: hci1: command 0x1003 tx timeout [ 2807.313445] Bluetooth: hci1: sending frame failed (-49) [ 2808.747838] Bluetooth: hci0: command 0x1001 tx timeout [ 2808.747862] Bluetooth: hci2: command 0x1001 tx timeout [ 2808.758718] Bluetooth: hci0: sending frame failed (-49) [ 2808.764238] Bluetooth: hci2: sending frame failed (-49) [ 2808.827790] Bluetooth: hci3: command 0x1001 tx timeout [ 2808.833198] Bluetooth: hci3: sending frame failed (-49) [ 2809.387797] Bluetooth: hci1: command 0x1001 tx timeout [ 2809.393198] Bluetooth: hci1: sending frame failed (-49) [ 2810.827780] Bluetooth: hci2: command 0x1009 tx timeout [ 2810.827899] Bluetooth: hci0: command 0x1009 tx timeout [ 2810.907807] Bluetooth: hci3: command 0x1009 tx timeout [ 2811.467831] Bluetooth: hci1: command 0x1009 tx timeout 04:03:34 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x9}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:03:34 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) r0 = open(&(0x7f0000000000)='./file0\x00', 0x208c00, 0x34) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x5, 0x9, 0x4}, 0x10) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 04:03:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x541d, &(0x7f0000000000)=0x30) 04:03:34 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000006a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:03:34 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0xb}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:03:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) write$P9_RLINK(r4, &(0x7f0000000280)={0x7}, 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x41) [ 2814.838228] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2814.874973] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2814.903210] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2814.984174] Bluetooth: hci2: Frame reassembly failed (-84) [ 2814.990912] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 04:03:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 04:03:35 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0xd}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:03:35 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000007a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:03:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x9, 0x3}, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x0, 0x8}, &(0x7f00000008c0), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=0x10001}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="850000005300000095000000000000445a0708d1303274df9696513dcf76656b8ba4549a791dba3e4233542f67a07e7255df2fa25dc49432457ddde8ec5afff74287d7b8e902ab041da7cbfb0fefd473038d958723088900cdc2ffcc604a94dbf6fd2cd61b0dfc2cbe6880df8b5d0e00e07ea49e083963cedf928cc8cbae6903bb9adc8847cb065d8fa0a5014641"], 0x0, 0x0, 0x2e, &(0x7f0000000500)=""/46, 0x41100, 0x9, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x10, 0x3}, 0x10, r5, r4}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x78, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r5}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r5, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=""/86, 0x56, r5}}, 0x10) r7 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r8 = dup2(r7, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r8, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @ldst={0xb8a5b39620537b18, 0x3, 0x1, 0x1, 0x5, 0x100, 0xfffffffffffffffc}, @generic={0x4, 0x8, 0xf, 0x40, 0x8}, @ldst={0x2, 0x2, 0x5, 0x5, 0x4, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x7, 0x18, &(0x7f0000000140)=""/24, 0x0, 0x4, [], r1, 0x13, r3, 0x8, &(0x7f0000000200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x5, 0x8, 0x8001}, 0x10, r6}, 0x78) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:03:35 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x28}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2815.449137] Bluetooth: hci1: Frame reassembly failed (-84) [ 2815.458530] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2815.465409] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2815.485945] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:03:35 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600000aa84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2815.503412] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2815.504690] Bluetooth: hci3: Frame reassembly failed (-84) [ 2815.521955] Bluetooth: hci3: Frame reassembly failed (-84) 04:03:35 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x29}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:03:35 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x2b}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2815.604445] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2815.617782] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2815.626946] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2816.987966] Bluetooth: hci2: command 0x1003 tx timeout [ 2816.993325] Bluetooth: hci0: command 0x1003 tx timeout [ 2816.993407] Bluetooth: hci2: sending frame failed (-49) [ 2817.004028] Bluetooth: hci0: sending frame failed (-49) [ 2817.467802] Bluetooth: hci1: command 0x1003 tx timeout [ 2817.473308] Bluetooth: hci1: sending frame failed (-49) [ 2817.547775] Bluetooth: hci3: command 0x1003 tx timeout [ 2817.553285] Bluetooth: hci3: sending frame failed (-49) [ 2819.067736] Bluetooth: hci2: command 0x1001 tx timeout [ 2819.067919] Bluetooth: hci0: command 0x1001 tx timeout [ 2819.073144] Bluetooth: hci2: sending frame failed (-49) [ 2819.078645] Bluetooth: hci0: sending frame failed (-49) [ 2819.547782] Bluetooth: hci1: command 0x1001 tx timeout [ 2819.554231] Bluetooth: hci1: sending frame failed (-49) [ 2819.627820] Bluetooth: hci3: command 0x1001 tx timeout [ 2819.633233] Bluetooth: hci3: sending frame failed (-49) [ 2821.147755] Bluetooth: hci2: command 0x1009 tx timeout [ 2821.147959] Bluetooth: hci0: command 0x1009 tx timeout [ 2821.627795] Bluetooth: hci1: command 0x1009 tx timeout [ 2821.707814] Bluetooth: hci3: command 0x1009 tx timeout 04:03:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000000)=0x30) 04:03:44 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600000ca84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:03:44 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x2c}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:03:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xfffffffe}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, 0x0, 0x4040454) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r7, r6) setresgid(r4, r5, r6) [ 2825.038097] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2825.067813] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2825.075984] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2825.097268] Bluetooth: hci0: Frame reassembly failed (-84) [ 2825.132655] Bluetooth: hci2: Frame reassembly failed (-84) [ 2825.133190] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 04:03:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 04:03:45 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x2f}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:03:45 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600000ea84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:03:45 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) r0 = socket$inet(0x2, 0x4000000805, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x14, &(0x7f0000000080), 0x8) r5 = dup2(r0, r2) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) dup3(r5, r1, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) [ 2825.672088] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2825.697776] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:03:45 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3c}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2825.727100] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2825.737791] Bluetooth: hci1: Frame reassembly failed (-84) [ 2825.738400] Bluetooth: hci1: Frame reassembly failed (-84) 04:03:45 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600000fa84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:03:45 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x50}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:03:45 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x60}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2825.870408] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2825.878764] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2825.888903] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2827.147728] Bluetooth: hci2: command 0x1003 tx timeout [ 2827.147745] Bluetooth: hci0: command 0x1003 tx timeout [ 2827.153259] Bluetooth: hci2: sending frame failed (-49) [ 2827.164007] Bluetooth: hci0: sending frame failed (-49) [ 2827.787754] Bluetooth: hci1: command 0x1003 tx timeout [ 2827.793435] Bluetooth: hci1: sending frame failed (-49) [ 2829.227770] Bluetooth: hci2: command 0x1001 tx timeout [ 2829.227795] Bluetooth: hci0: command 0x1001 tx timeout [ 2829.238541] Bluetooth: hci2: sending frame failed (-49) [ 2829.244027] Bluetooth: hci0: sending frame failed (-49) [ 2829.867743] Bluetooth: hci1: command 0x1001 tx timeout [ 2829.873160] Bluetooth: hci1: sending frame failed (-49) [ 2831.307726] Bluetooth: hci2: command 0x1009 tx timeout [ 2831.307733] Bluetooth: hci0: command 0x1009 tx timeout [ 2831.947786] Bluetooth: hci1: command 0x1009 tx timeout 04:03:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5421, &(0x7f0000000000)=0x30) 04:03:54 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:03:54 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000240)={0xf000000, 0x2e, 0x0, r5, 0x0, &(0x7f0000000500)={0x980913, 0x5, [], @value=0xf7f}}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000300)={0x1}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0xd, &(0x7f0000000080)={r11}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f00000003c0)={r11, 0x7, 0x5a2, 0x8001}, &(0x7f0000000400)=0x10) r13 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r13, 0x84, 0x70, &(0x7f0000000440)=@sack_info={r12, 0x7, 0x7}, &(0x7f0000002000)=0xc) r14 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_ULP(r15, 0x6, 0x1f, &(0x7f0000000380)='tls\x00', 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="c1d314cef5e6cc44cdc142dedd4b6f5b7a7193a07e495700"/34, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0xd, &(0x7f0000000080)={r16}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f00000002c0)={r16, 0x4}, 0x8) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x6, 0x6, 0x4, 0x20, 0x116, {r0, r1/1000+10000}, {0x5, 0x8, 0x9, 0x1, 0x6, 0x4, "bae0f713"}, 0x3, 0x3, @fd=r3, 0x1f, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r17, 0xc058534b, &(0x7f0000000140)={0x8, 0x7fffffff, 0x3, 0x0, 0x7fff, 0x2}) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 04:03:54 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000010a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2835.285830] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2835.313649] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2835.323090] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2835.375509] Bluetooth: hci0: Frame reassembly failed (-84) 04:03:55 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x2}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:03:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x8000) 04:03:55 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000048a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:03:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8000003) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000000c0)={0xb3ac00, 0x7ff}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r3, 0xc46dfc707e1df77d}, 0x14}}, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b00095c5", @ANYRES16=r4, @ANYBLOB="000327bd7000fbdbdf2501000000600008802c00078008000500a708896e08000600c900000008000500577b3b02080006002900000008000500c77cc4552c00078008000600f7000000080006001b00000008000500699c4b26080006003600000008000500d233477a04000780340004800500030002000000050003000200000005000300000000000500030007000000050003000500000005000300020000000800010001000000"], 0xb0}}, 0x488d1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xdc, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xc0, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e989356}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7637}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x422f08f7}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59def6e1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f615f0a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcaea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59f766f6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5616}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f4ab449}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7928}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x36a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fcc3d79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd141}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1cf2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x70fa}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8828}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7680}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cea3ddb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c602e31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6df93eea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d80e8d8}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:03:55 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a060001d0a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2835.929551] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2835.942198] Bluetooth: hci1: Frame reassembly failed (-84) [ 2835.947336] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2835.956965] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2835.957447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13954 comm=syz-executor.2 04:03:55 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2835.972613] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2835.987505] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 2836.007084] netlink: 'syz-executor.5': attribute type 21 has an invalid length. [ 2836.010487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13957 comm=syz-executor.2 04:03:55 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600004ca84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2836.018822] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 04:03:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) [ 2836.115008] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2836.179129] Bluetooth: hci2: Frame reassembly failed (-84) [ 2836.185900] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2837.387708] Bluetooth: hci0: command 0x1003 tx timeout [ 2837.393110] Bluetooth: hci0: sending frame failed (-49) [ 2837.947726] Bluetooth: hci1: command 0x1003 tx timeout [ 2837.953202] Bluetooth: hci1: sending frame failed (-49) [ 2838.187723] Bluetooth: hci2: command 0x1003 tx timeout [ 2838.193198] Bluetooth: hci2: sending frame failed (-49) [ 2839.467749] Bluetooth: hci0: command 0x1001 tx timeout [ 2839.473142] Bluetooth: hci0: sending frame failed (-49) [ 2840.027771] Bluetooth: hci1: command 0x1001 tx timeout [ 2840.033160] Bluetooth: hci1: sending frame failed (-49) [ 2840.267746] Bluetooth: hci2: command 0x1001 tx timeout [ 2840.273167] Bluetooth: hci2: sending frame failed (-49) [ 2841.547760] Bluetooth: hci0: command 0x1009 tx timeout [ 2842.107824] Bluetooth: hci1: command 0x1009 tx timeout [ 2842.347800] Bluetooth: hci2: command 0x1009 tx timeout 04:04:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x30) 04:04:05 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x4}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:04:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) lsetxattr$security_selinux(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:ld_so_t:s0\x00', 0x1d, 0x2) 04:04:05 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000060a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2845.499499] validate_nla: 2 callbacks suppressed [ 2845.499509] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2845.533283] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2845.541583] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:04:05 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x6}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2845.575240] Bluetooth: hci3: Frame reassembly failed (-84) 04:04:05 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000068a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:04:05 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:04:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000580)=0x17) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) fallocate(r0, 0x1, 0x3, 0x9617) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3, 0x0, 0x100}, 0x20) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x585a81, 0x0) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000540)={0x190, 0x1, &(0x7f0000000140)="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"}) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) dup2(r7, r6) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r9 = dup2(r8, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r9, &(0x7f0000000280)={0x11e}, 0x269) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x110, r9, 0x3) [ 2846.159334] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2846.172794] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2846.181301] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:04:05 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x8}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:04:05 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600006ca84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2846.205862] Bluetooth: hci1: Frame reassembly failed (-84) [ 2846.207534] Bluetooth: hci1: Frame reassembly failed (-84) 04:04:06 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2846.281259] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2846.294001] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2846.303782] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:04:06 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x204380, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000100)=0x400000c) [ 2846.797104] Bluetooth: hci2: Frame reassembly failed (-84) [ 2847.627939] Bluetooth: hci3: command 0x1003 tx timeout [ 2847.633340] Bluetooth: hci3: sending frame failed (-49) [ 2847.637675] Bluetooth: hci0: command 0x1003 tx timeout [ 2847.644204] Bluetooth: hci0: sending frame failed (-49) [ 2848.267754] Bluetooth: hci1: command 0x1003 tx timeout [ 2848.273298] Bluetooth: hci1: sending frame failed (-49) [ 2848.827744] Bluetooth: hci2: command 0x1003 tx timeout [ 2848.833199] Bluetooth: hci2: sending frame failed (-49) [ 2849.708008] Bluetooth: hci0: command 0x1001 tx timeout [ 2849.713454] Bluetooth: hci3: command 0x1001 tx timeout [ 2849.713503] Bluetooth: hci0: sending frame failed (-49) [ 2849.719445] Bluetooth: hci3: sending frame failed (-49) [ 2850.347821] Bluetooth: hci1: command 0x1001 tx timeout [ 2850.353226] Bluetooth: hci1: sending frame failed (-49) [ 2850.907768] Bluetooth: hci2: command 0x1001 tx timeout [ 2850.913193] Bluetooth: hci2: sending frame failed (-49) [ 2851.787833] Bluetooth: hci0: command 0x1009 tx timeout [ 2851.788051] Bluetooth: hci3: command 0x1009 tx timeout [ 2852.427788] Bluetooth: hci1: command 0x1009 tx timeout [ 2852.987745] Bluetooth: hci2: command 0x1009 tx timeout 04:04:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5424, &(0x7f0000000000)=0x30) 04:04:15 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000074a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:04:15 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xb}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:04:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) lsetxattr$security_selinux(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:ld_so_t:s0\x00', 0x1d, 0x2) 04:04:15 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xd}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2855.765749] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2855.777766] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2855.785350] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:04:15 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a0600007aa84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2855.841187] Bluetooth: hci0: Frame reassembly failed (-84) 04:04:15 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x28}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2855.912195] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2855.920358] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2855.928387] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:04:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$VIDIOC_RESERVED(r2, 0x5601, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) 04:04:16 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a060000fca84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:04:16 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x29}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:04:16 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x2b}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2856.382966] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2856.395452] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2856.417858] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2856.443308] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2856.452507] Bluetooth: hci1: Frame reassembly failed (-84) 04:04:16 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000644306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2857.019457] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2857.867745] Bluetooth: hci3: command 0x1003 tx timeout [ 2857.873231] Bluetooth: hci0: command 0x1003 tx timeout [ 2857.873250] Bluetooth: hci3: sending frame failed (-49) [ 2857.879299] Bluetooth: hci0: sending frame failed (-49) [ 2858.507735] Bluetooth: hci1: command 0x1003 tx timeout [ 2858.513217] Bluetooth: hci1: sending frame failed (-49) [ 2859.947770] Bluetooth: hci0: command 0x1001 tx timeout [ 2859.953165] Bluetooth: hci0: sending frame failed (-49) [ 2859.959632] Bluetooth: hci3: command 0x1001 tx timeout [ 2859.965153] Bluetooth: hci3: sending frame failed (-49) [ 2860.597773] Bluetooth: hci1: command 0x1001 tx timeout [ 2860.603178] Bluetooth: hci1: sending frame failed (-49) [ 2862.027902] Bluetooth: hci3: command 0x1009 tx timeout [ 2862.033262] Bluetooth: hci0: command 0x1009 tx timeout [ 2862.667775] Bluetooth: hci1: command 0x1009 tx timeout 04:04:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5425, &(0x7f0000000000)=0x30) 04:04:25 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x2c}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:04:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x6}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x28000013) ioctl$KDADDIO(r0, 0x400455c8, 0x4) syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x52241d4f) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:04:25 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a80906910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:04:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) lsetxattr$security_selinux(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:ld_so_t:s0\x00', 0x1d, 0x2) 04:04:25 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x2f}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2866.018655] Bluetooth: hci0: Frame reassembly failed (-84) [ 2866.030648] validate_nla: 2 callbacks suppressed [ 2866.030659] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2866.044834] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 04:04:25 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a85206910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2866.101340] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2866.114565] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2866.213766] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2866.221379] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2866.229092] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:04:26 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3c}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:04:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x6a2341, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8022, 0x0) openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) 04:04:26 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a85306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:04:26 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x50}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:04:26 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84302910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2866.633273] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2866.643014] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2866.652045] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2866.759571] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2868.027872] Bluetooth: hci0: command 0x1003 tx timeout [ 2868.033364] Bluetooth: hci0: sending frame failed (-49) [ 2868.107771] Bluetooth: hci2: command 0x1003 tx timeout [ 2868.113256] Bluetooth: hci2: sending frame failed (-49) [ 2868.187847] Bluetooth: hci3: command 0x1003 tx timeout [ 2868.193286] Bluetooth: hci3: sending frame failed (-49) [ 2870.107759] Bluetooth: hci0: command 0x1001 tx timeout [ 2870.113165] Bluetooth: hci0: sending frame failed (-49) [ 2870.187800] Bluetooth: hci2: command 0x1001 tx timeout [ 2870.193217] Bluetooth: hci2: sending frame failed (-49) [ 2870.267886] Bluetooth: hci3: command 0x1001 tx timeout [ 2870.273474] Bluetooth: hci3: sending frame failed (-49) [ 2872.187814] Bluetooth: hci0: command 0x1009 tx timeout [ 2872.267739] Bluetooth: hci2: command 0x1009 tx timeout [ 2872.347792] Bluetooth: hci3: command 0x1009 tx timeout 04:04:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5427, &(0x7f0000000000)=0x30) 04:04:35 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x60}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:04:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0xfffffffa, 0x1, {0x1, 0x3, 0x2, 0x1, 0x55e8}, 0xffffffff}) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 04:04:35 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84305910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:04:35 executing program 2: ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0x4, 0x15000}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) accept(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000140)=0x80) bind$nfc_llcp(r1, &(0x7f0000000180)={0x27, 0x0, 0x2, 0x4, 0x0, 0x1f, "473ce0f7a260a6a6b870376a26def1af79113b8e9f6ef62087ded1b7fa21c86feff21da165936756abbfff1e8f3874024ecc0124cbb7449faca87051eb1cba", 0x2}, 0x60) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 04:04:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 2876.315175] validate_nla: 2 callbacks suppressed [ 2876.315187] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2876.333623] Bluetooth: hci1: Frame reassembly failed (-84) [ 2876.344882] Bluetooth: hci0: Frame reassembly failed (-84) 04:04:36 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2876.363975] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2876.373731] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:04:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@rand_addr="46cf9c532ffa050423ba77de92a16642", 0x0, 0x0, 0x1, 0x3}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0xd, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0xd, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0x8) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f00000000c0)={r7, 0x1f}, &(0x7f0000000100)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:04:36 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84309910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:04:36 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x2, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2876.532787] Bluetooth: hci3: Frame reassembly failed (-84) [ 2876.532835] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2876.563102] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2876.570956] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:04:36 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x3, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:04:36 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430b910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2876.581242] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2876.684372] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2876.692123] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2876.700318] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2878.357780] Bluetooth: hci0: command 0x1003 tx timeout [ 2878.363771] Bluetooth: hci1: command 0x1003 tx timeout [ 2878.363806] Bluetooth: hci0: sending frame failed (-49) [ 2878.370166] Bluetooth: hci1: sending frame failed (-49) [ 2878.427745] Bluetooth: hci2: command 0x1003 tx timeout [ 2878.434118] Bluetooth: hci2: sending frame failed (-49) [ 2878.587952] Bluetooth: hci3: command 0x1003 tx timeout [ 2878.593612] Bluetooth: hci3: sending frame failed (-49) [ 2880.427854] Bluetooth: hci0: command 0x1001 tx timeout [ 2880.427860] Bluetooth: hci1: command 0x1001 tx timeout [ 2880.427964] Bluetooth: hci1: sending frame failed (-49) [ 2880.433303] Bluetooth: hci0: sending frame failed (-49) [ 2880.507942] Bluetooth: hci2: command 0x1001 tx timeout [ 2880.513604] Bluetooth: hci2: sending frame failed (-49) [ 2880.677920] Bluetooth: hci3: command 0x1001 tx timeout [ 2880.683523] Bluetooth: hci3: sending frame failed (-49) [ 2882.507836] Bluetooth: hci0: command 0x1009 tx timeout [ 2882.507842] Bluetooth: hci1: command 0x1009 tx timeout [ 2882.589017] Bluetooth: hci2: command 0x1009 tx timeout [ 2882.747890] Bluetooth: hci3: command 0x1009 tx timeout 04:04:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5428, &(0x7f0000000000)=0x30) 04:04:46 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x4, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:04:46 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84311910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:04:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x10000, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x8) 04:04:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 2886.496293] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:04:46 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x6, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:04:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 2886.552982] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2886.560734] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2886.572652] Bluetooth: hci0: Frame reassembly failed (-84) [ 2886.593905] Bluetooth: hci1: Frame reassembly failed (-84) 04:04:46 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84314910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:04:46 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x7, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:04:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:04:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x103000, 0x0) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f00000002c0)={0x2, 0x4}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x100011) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:04:46 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x8, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2887.117124] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2887.135616] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2888.587703] Bluetooth: hci0: command 0x1003 tx timeout [ 2888.593158] Bluetooth: hci0: sending frame failed (-49) [ 2888.667735] Bluetooth: hci1: command 0x1003 tx timeout [ 2888.673123] Bluetooth: hci1: sending frame failed (-49) [ 2890.677814] Bluetooth: hci0: command 0x1001 tx timeout [ 2890.683225] Bluetooth: hci0: sending frame failed (-49) [ 2890.747764] Bluetooth: hci1: command 0x1001 tx timeout [ 2890.753225] Bluetooth: hci1: sending frame failed (-49) [ 2892.747762] Bluetooth: hci0: command 0x1009 tx timeout [ 2892.827765] Bluetooth: hci1: command 0x1009 tx timeout 04:04:56 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84335910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:04:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:04:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000000)=0x30) 04:04:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x28a85) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000000c0)={0xfffffffa, 0x9, 0xa1a2, 0x3, 0x9, "f0aef0c5265f41370378a1ff8f0fe4166b3380", 0x100, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:04:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 04:04:56 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x9, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2896.743071] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2896.776372] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2896.776801] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:04:56 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0xb, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:04:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 2896.800574] Bluetooth: hci0: Frame reassembly failed (-84) [ 2896.819916] Bluetooth: hci1: Frame reassembly failed (-84) 04:04:56 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84352910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:04:56 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0xd, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:04:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x252901, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x9) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 04:04:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 2896.965639] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2896.978939] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:04:56 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84353910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:04:56 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x28, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2897.143265] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2897.158655] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2898.827824] Bluetooth: hci0: command 0x1003 tx timeout [ 2898.833247] Bluetooth: hci0: sending frame failed (-49) [ 2898.838826] Bluetooth: hci1: command 0x1003 tx timeout [ 2898.844199] Bluetooth: hci1: sending frame failed (-49) [ 2900.907741] Bluetooth: hci1: command 0x1001 tx timeout [ 2900.913128] Bluetooth: hci0: command 0x1001 tx timeout [ 2900.913211] Bluetooth: hci1: sending frame failed (-49) [ 2900.926487] Bluetooth: hci0: sending frame failed (-49) [ 2902.987804] Bluetooth: hci0: command 0x1009 tx timeout [ 2902.993179] Bluetooth: hci1: command 0x1009 tx timeout 04:05:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5441, &(0x7f0000000000)=0x30) 04:05:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:05:06 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x29, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:05:06 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100000003000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:05:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000002c0)="95b7fda3a0d339c024fd162a85ca6eb4", 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) fcntl$setstatus(r3, 0x4, 0x712f8e167c933fd9) ioctl$KDADDIO(r0, 0x400455c8, 0x200) socket$l2tp(0x2, 0x2, 0x73) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000180)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:05:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 04:05:06 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x2b, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:05:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x200000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 2907.012775] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2907.028438] Bluetooth: hci1: Frame reassembly failed (-84) [ 2907.032280] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 04:05:06 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910200000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:05:06 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x2c, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:05:06 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910300000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2907.158102] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2907.177959] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2907.188172] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2907.195785] Bluetooth: hci3: Frame reassembly failed (-84) 04:05:06 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x2f, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2907.279853] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2907.299012] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2909.067713] Bluetooth: hci0: command 0x1003 tx timeout [ 2909.067720] Bluetooth: hci2: command 0x1003 tx timeout [ 2909.067746] Bluetooth: hci1: command 0x1003 tx timeout [ 2909.073120] Bluetooth: hci2: sending frame failed (-49) [ 2909.086510] Bluetooth: hci1: sending frame failed (-49) [ 2909.089233] Bluetooth: hci0: sending frame failed (-49) [ 2909.227710] Bluetooth: hci3: command 0x1003 tx timeout [ 2909.233190] Bluetooth: hci3: sending frame failed (-49) [ 2911.147738] Bluetooth: hci1: command 0x1001 tx timeout [ 2911.147744] Bluetooth: hci0: command 0x1001 tx timeout [ 2911.147777] Bluetooth: hci2: command 0x1001 tx timeout [ 2911.153890] Bluetooth: hci0: sending frame failed (-49) [ 2911.158525] Bluetooth: hci1: sending frame failed (-49) [ 2911.159078] Bluetooth: hci2: sending frame failed (-49) [ 2911.307708] Bluetooth: hci3: command 0x1001 tx timeout [ 2911.313108] Bluetooth: hci3: sending frame failed (-49) [ 2913.227735] Bluetooth: hci0: command 0x1009 tx timeout [ 2913.227741] Bluetooth: hci2: command 0x1009 tx timeout [ 2913.227772] Bluetooth: hci1: command 0x1009 tx timeout [ 2913.387756] Bluetooth: hci3: command 0x1009 tx timeout 04:05:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5450, &(0x7f0000000000)=0x30) 04:05:16 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x3c, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:05:16 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910400000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:05:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0xe93, 0x303002) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @bcast, 0x40, 0x8, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x8040, 0x0) 04:05:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 2917.217821] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2917.244820] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:05:17 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x50, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:05:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910500000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2917.284459] Bluetooth: hci0: Frame reassembly failed (-84) [ 2917.307597] Bluetooth: hci2: Frame reassembly failed (-84) [ 2917.313638] Bluetooth: hci2: Frame reassembly failed (-84) [ 2917.319524] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2917.395905] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2917.409784] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2917.417435] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:05:17 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x60, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:05:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 04:05:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910600000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:05:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910700000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2917.817300] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2917.825026] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:05:17 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x3, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2917.878365] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2917.885908] Bluetooth: hci3: Frame reassembly failed (-84) [ 2917.939269] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2917.947050] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2919.307709] Bluetooth: hci0: command 0x1003 tx timeout [ 2919.307767] Bluetooth: hci2: command 0x1003 tx timeout [ 2919.313247] Bluetooth: hci0: sending frame failed (-49) [ 2919.324168] Bluetooth: hci2: sending frame failed (-49) [ 2919.387731] Bluetooth: hci1: command 0x1003 tx timeout [ 2919.393254] Bluetooth: hci1: sending frame failed (-49) [ 2919.947705] Bluetooth: hci3: command 0x1003 tx timeout [ 2919.953228] Bluetooth: hci3: sending frame failed (-49) [ 2921.387782] Bluetooth: hci2: command 0x1001 tx timeout [ 2921.393162] Bluetooth: hci0: command 0x1001 tx timeout [ 2921.393198] Bluetooth: hci2: sending frame failed (-49) [ 2921.399131] Bluetooth: hci0: sending frame failed (-49) [ 2921.467751] Bluetooth: hci1: command 0x1001 tx timeout [ 2921.473216] Bluetooth: hci1: sending frame failed (-49) [ 2922.027712] Bluetooth: hci3: command 0x1001 tx timeout [ 2922.033116] Bluetooth: hci3: sending frame failed (-49) [ 2923.467750] Bluetooth: hci2: command 0x1009 tx timeout [ 2923.467756] Bluetooth: hci0: command 0x1009 tx timeout [ 2923.547832] Bluetooth: hci1: command 0x1009 tx timeout [ 2924.107747] Bluetooth: hci3: command 0x1009 tx timeout 04:05:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5451, &(0x7f0000000000)=0x30) 04:05:27 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x4, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:05:27 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910a00000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:05:27 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 04:05:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:05:27 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x5, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2927.464347] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2927.496255] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:05:27 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910c00000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:05:27 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x6, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2927.643385] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2927.656101] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2927.664188] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:05:27 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910e00000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:05:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x8, 0x100, 0x840000004, 0x0, 0x0, 0x0, 0x4cb, 0x80000000], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:05:27 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x9, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:05:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) ioctl$KDADDIO(r4, 0x400455c8, 0x400) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 2928.072220] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2928.101554] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2928.115825] kvm [14910]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x40000064 data 0x8 [ 2928.125448] kvm [14910]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x40000014 data 0x8 [ 2928.135515] kvm [14910]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x40000044 data 0x8 [ 2928.155152] kvm [14910]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x40000034 data 0x8 [ 2928.171430] kvm [14910]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x40000024 data 0x8 [ 2928.189506] kvm [14910]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x40000054 data 0x8 [ 2928.206265] kvm [14910]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x40000074 data 0x8 [ 2928.215562] kvm [14910]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x40000053 data 0x8 [ 2928.228081] kvm [14910]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x40000033 data 0x8 [ 2928.236952] kvm [14910]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x40000043 data 0x8 [ 2929.637724] Bluetooth: hci0: command 0x1003 tx timeout [ 2929.643197] Bluetooth: hci0: sending frame failed (-49) [ 2929.707782] Bluetooth: hci1: command 0x1003 tx timeout [ 2929.713189] Bluetooth: hci1: sending frame failed (-49) [ 2931.707802] Bluetooth: hci0: command 0x1001 tx timeout [ 2931.713271] Bluetooth: hci0: sending frame failed (-49) [ 2931.787766] Bluetooth: hci1: command 0x1001 tx timeout [ 2931.793181] Bluetooth: hci1: sending frame failed (-49) [ 2933.787749] Bluetooth: hci0: command 0x1009 tx timeout [ 2933.867839] Bluetooth: hci1: command 0x1009 tx timeout 04:05:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5452, &(0x7f0000000000)=0x30) 04:05:37 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910f00000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:05:37 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0xb, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:05:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x19) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r3 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x141741) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000180)={0x800, 0x0, 0x100, 0x1, 0x7, "142bbbe238c40b23"}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000001c0)) 04:05:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:05:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) [ 2938.323091] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:05:38 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x28, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2938.384307] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:05:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000000300)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x20100) write$P9_RCLUNK(r4, &(0x7f0000000380)={0x7, 0x79, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0xd, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r5, 0xecc}, 0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:05:38 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306911000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:05:38 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef0b571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2938.576361] Bluetooth: hci2: Frame reassembly failed (-84) [ 2938.578562] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2938.624220] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2938.662755] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:05:38 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968027378ee824f4dffba7"}]}}}}}}, 0x0) [ 2938.693329] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:05:38 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306914800000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2938.873324] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2938.884838] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2938.897998] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2940.427729] Bluetooth: hci1: command 0x1003 tx timeout [ 2940.433170] Bluetooth: hci0: command 0x1003 tx timeout [ 2940.433208] Bluetooth: hci1: sending frame failed (-49) [ 2940.444030] Bluetooth: hci0: sending frame failed (-49) [ 2940.587741] Bluetooth: hci2: command 0x1003 tx timeout [ 2940.593254] Bluetooth: hci2: sending frame failed (-49) [ 2942.507800] Bluetooth: hci0: command 0x1001 tx timeout [ 2942.513137] Bluetooth: hci1: command 0x1001 tx timeout [ 2942.513217] Bluetooth: hci0: sending frame failed (-49) [ 2942.525015] Bluetooth: hci1: sending frame failed (-49) [ 2942.667802] Bluetooth: hci2: command 0x1001 tx timeout [ 2942.673235] Bluetooth: hci2: sending frame failed (-49) [ 2944.587809] Bluetooth: hci1: command 0x1009 tx timeout [ 2944.593184] Bluetooth: hci0: command 0x1009 tx timeout [ 2944.747739] Bluetooth: hci2: command 0x1009 tx timeout 04:05:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x545d, &(0x7f0000000000)=0x30) 04:05:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000200)="892e0d597945aa09489d3633157a5ab0d525409bf1f5d2c04b61b47aa992582e98934ecd898478226498007f639a6a", 0x2f}], 0x1) 04:05:48 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968028378ee824f4dffba7"}]}}}}}}, 0x0) 04:05:48 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306914c00000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:05:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 2948.548850] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2948.585708] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:05:48 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef245713139680500b8ee824f4dffba7"}]}}}}}}, 0x0) [ 2948.615094] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:05:48 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306916000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2948.666150] Bluetooth: hci1: Frame reassembly failed (-84) [ 2948.734822] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2948.754151] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2948.762241] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:05:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x267880, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:05:48 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee80bf4dffba7"}]}}}}}}, 0x0) 04:05:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x15, 0x80005, 0x0) bind$inet6(r1, 0x0, 0x0) dup2(0xffffffffffffffff, r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 04:05:48 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306916800000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:05:49 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r1, &(0x7f0000000280)={0x11e}, 0x269) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) [ 2949.272227] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2949.294951] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2949.306433] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2950.667727] Bluetooth: hci1: command 0x1003 tx timeout [ 2950.673139] Bluetooth: hci1: sending frame failed (-49) [ 2950.678671] Bluetooth: hci0: command 0x1003 tx timeout [ 2950.684424] Bluetooth: hci0: sending frame failed (-49) [ 2952.757755] Bluetooth: hci0: command 0x1001 tx timeout [ 2952.763189] Bluetooth: hci1: command 0x1001 tx timeout [ 2952.763249] Bluetooth: hci0: sending frame failed (-49) [ 2952.768600] Bluetooth: hci1: sending frame failed (-49) [ 2954.827735] Bluetooth: hci1: command 0x1009 tx timeout [ 2954.827752] Bluetooth: hci0: command 0x1009 tx timeout 04:05:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5460, &(0x7f0000000000)=0x30) 04:05:58 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306916c00000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:05:58 executing program 1: r0 = memfd_create(&(0x7f0000000100)='#\x00', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="40000000000025000400000005007c00000000000000280000000000d4e34ba67f6ebd451a22dec4c83108206624ca7a4f9d38e16565a16eb68ca2227b28aa5a5282ff43ba0c2b77d868c0757da79288e04d05da00f45ebf460b26bbc8ff1a1aecab81fe6d383a064ea312ba66db4ce4948932585fc97ed370ddb2a3acadc69287b2e940eb689162949f0e102da9edd02e3913d84945b63c470000000000003d5e1e904c000000000000000000"], 0x1c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x301000, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[]}, 0x1, 0x0, 0x0, 0x4008884}, 0x20004891) pipe(&(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000140)="b22ba9", 0x3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r5 = dup3(0xffffffffffffffff, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f00000000c0)=0x9, 0x4) 04:05:58 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @ipv4={[], [], @multicast1}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f00000000c0)=[{}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000240)=0x10) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x11e}, 0x269) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) 04:05:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:05:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) dup2(r1, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 2958.829874] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2958.837474] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2958.866411] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2958.872670] Bluetooth: hci1: Frame reassembly failed (-84) 04:05:58 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08060001080006040009ffffffffffff00000000ffffffffffffac1414aa4d0789a34a760d451913226e8cd7d0310277e304e60a6b4c280b213ce66216a8d3fae559e06ac4b08dc4dadc972cc67657ff1fb2d47b3c0ea6c5b3a00594afa58bf8b41eddfdb70fb7865d5e935787ec95115284e96de7916ea2b0cfd3f707a4447ba0ad67d7694238b879f3206757bc5f533b1d0c20f87217a4f310f72a708903dfb573771d6ae9"], 0x0) [ 2958.893838] Bluetooth: hci2: Frame reassembly failed (-84) 04:05:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe72}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="b7", 0x140000}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)='Z', 0x100000}], 0x1}}], 0x729, 0x0) 04:05:58 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000180)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, [{0x0, 0x0, "4ac8341053526d65d838785d339d400b45b66e0bd09dfec8ea22405709f65b365a60677c21cabd107df8da8953650a7c74cdf5a1546c9855a4"}, {0x0, 0xfffffffffffffefb, "84f0da52ef2400000000805037070024f4dffba7"}]}}}}}}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000000c0)={0x0, @reserved}) [ 2958.951985] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:05:58 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306917400000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2959.064753] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2959.093078] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2959.112104] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:05:58 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306917a00000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:05:58 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x442002, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = semget$private(0x0, 0x3, 0xc5) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000080)=""/94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x3, [], @remote}}}}}}, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x7, r7, 0x8}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)={0x1c, r5, 0x31f, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000ec0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e80)={&(0x7f0000000300)={0xb58, r5, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_IE={0x806, 0x2a, "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"}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0x7, 0x0, [0x1a, 0x13, 0x1c]}, {0x8, 0x0, [0x8, 0x10, 0x1e, 0xd]}, {0x8, 0x0, [0xe, 0x13, 0x1, 0x4]}, {0x9, 0x0, [0x12, 0x15, 0x10, 0x3, 0xf]}]}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x37}}, @NL80211_ATTR_IE={0x2e3, 0x2a, "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"}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0xca}}]}, 0xb58}, 0x1, 0x0, 0x0, 0x8800}, 0x80) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r8, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x11}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) [ 2959.304973] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2959.331124] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2960.907726] Bluetooth: hci0: command 0x1003 tx timeout [ 2960.907732] Bluetooth: hci2: command 0x1003 tx timeout [ 2960.907760] Bluetooth: hci1: command 0x1003 tx timeout [ 2960.921110] Bluetooth: hci2: sending frame failed (-49) [ 2960.923849] Bluetooth: hci0: sending frame failed (-49) [ 2960.934875] Bluetooth: hci1: sending frame failed (-49) [ 2962.987765] Bluetooth: hci0: command 0x1001 tx timeout [ 2962.987771] Bluetooth: hci1: command 0x1001 tx timeout [ 2962.987842] Bluetooth: hci1: sending frame failed (-49) [ 2962.999531] Bluetooth: hci0: sending frame failed (-49) [ 2963.003983] Bluetooth: hci2: command 0x1001 tx timeout [ 2963.014935] Bluetooth: hci2: sending frame failed (-49) [ 2965.067773] Bluetooth: hci2: command 0x1009 tx timeout [ 2965.067779] Bluetooth: hci1: command 0x1009 tx timeout [ 2965.078630] Bluetooth: hci0: command 0x1009 tx timeout 04:06:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x40049409, &(0x7f0000000000)=0x30) 04:06:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x21b, 0x0, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x4d6, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 04:06:08 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0xf096) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0x1, &(0x7f0000000100)="4a4593432d337a0115d2dadaa773a3fbce7a85329f82cbdec5995f223d1d98841ff1450cb169908f616b51e085bd3c0a97dea236cc343d50cc432a41b6ff09ec5d247a74515d889ee95b3f6006ab43ca3f9b", &(0x7f0000000180)=""/172}, 0x20) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:06:08 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691f000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:06:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:06:08 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f00000000c0)={@any, 0x4, 0x1f}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x4) [ 2969.051533] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2969.088681] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:06:08 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r1, &(0x7f0000000280)={0x11e}, 0x269) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x800, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)={0x0, 0xc, 0x4, 0x40000, 0xde6, {0x77359400}, {0x3, 0xc, 0x9, 0xda, 0xfa, 0x5, "926c8572"}, 0x1, 0x0, @fd, 0x8000, 0x0, r2}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40801) r5 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r6 = dup2(r5, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r6, &(0x7f0000000280)={0x11e}, 0x269) ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f00000002c0)={0x2, 0x7fff}) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0xffffffffffffffd9) 04:06:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe72}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="b7", 0x100000}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)='Z', 0x100000}], 0x1}}], 0x729, 0x0) [ 2969.131855] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:06:08 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691fc00000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2969.214657] Bluetooth: hci2: Frame reassembly failed (-84) 04:06:08 executing program 0: syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60a4f00800512900fe8000000000000d00002b00000000aaff020000000000000000000000000001860090780000000000000000000000000005838f1e88027ecbe87a3bf848aec3d40bb1824ac761b59259ef7fdd10939ccbe65a293c067612cd1d48000284f0da52ef24571313968050378ee824f4dffba7"], 0x0) 04:06:09 executing program 0: syz_emit_ethernet(0x5e, &(0x7f00000002c0)=ANY=[@ANYBLOB="fdffffffffffaaaaaaaaaaaa86dd60a4f00800282900fe8000000000000000002b003f000000000000000000000000000000005add9ec45f221100005ced441c14bab019dee2d83f6d8557d1614600bf17000000000000000000000284f8daef0000000000c89b7c5049b999a2b3760cb2f4a933e42c67bdf2d92b9582ca9ced49f453a3fc0d5a9a3795cbaa16f56af14db386671b0c11cd60747210ab817f984ca42aa29546a7901d186af321a860ceebe324fedb7bdb7a3e6c0ce506fd3f22166cebc73e8348199923b459667817e43dad2bb725a12c4f773dbceff1cb9f1c979b2b3a2b807d7ca8ead3ee811de1dab39f1496ce374e1917eb8d64fbee2e03895f89915f768488107f0ec98f54f8a6be2775e0fbbba54a9df436e135167084c55dd3c7084b722912746aff67eb9b9e742d43dd3181f0758d185cfba2c560bb94b26d197512b25881af521b3a58d95f73f7a0e32e628016bdaf0d8dc86ca00ddb8c34e5"], 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x0, 0xa01) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000180)={0x28, 0x2, 0x0, {0x3, 0xcab, 0x5}}, 0x28) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x4, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000001c0)={0x18, 0x1, 0x0, {0x5}}, 0x18) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@hyper}) sysinfo(&(0x7f0000000440)=""/175) 04:06:09 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691d001000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 2969.309847] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2969.317342] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2969.326474] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2969.419332] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2969.428930] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2969.438341] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2971.227718] Bluetooth: hci2: command 0x1003 tx timeout [ 2971.233164] Bluetooth: hci2: sending frame failed (-49) [ 2971.238803] Bluetooth: hci1: command 0x1003 tx timeout [ 2971.244252] Bluetooth: hci1: sending frame failed (-49) [ 2971.249828] Bluetooth: hci0: command 0x1003 tx timeout [ 2971.255219] Bluetooth: hci0: sending frame failed (-49) [ 2973.307753] Bluetooth: hci0: command 0x1001 tx timeout [ 2973.313103] Bluetooth: hci1: command 0x1001 tx timeout [ 2973.313179] Bluetooth: hci0: sending frame failed (-49) [ 2973.318994] Bluetooth: hci1: sending frame failed (-49) [ 2973.329591] Bluetooth: hci2: command 0x1001 tx timeout [ 2973.335037] Bluetooth: hci2: sending frame failed (-49) [ 2975.387795] Bluetooth: hci2: command 0x1009 tx timeout [ 2975.387801] Bluetooth: hci0: command 0x1009 tx timeout [ 2975.398627] Bluetooth: hci1: command 0x1009 tx timeout 04:06:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x40086602, &(0x7f0000000000)=0x30) 04:06:18 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@empty, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x20000, 0x0) getsockopt$rose(r0, 0x104, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 04:06:18 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910003000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:06:18 executing program 1: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@can_newroute={0x38, 0x18, 0xf1ded74a0a29061b, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\b\x00'}}}, @CGW_FILTER={0xc}]}, 0x38}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 04:06:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:06:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000140)=0x7, &(0x7f0000000180)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 2979.283795] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2979.338786] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2979.351942] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:06:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2979.397047] Bluetooth: hci0: sending frame failed (-49) 04:06:19 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910005000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:06:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 04:06:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x13) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r3 = dup3(r1, r2, 0x80000) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x820000, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:06:19 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 2979.582169] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2979.616102] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:06:19 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f00000000c0)=0x4) [ 2979.644712] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2981.467756] Bluetooth: hci1: command 0x1003 tx timeout [ 2981.473207] Bluetooth: hci0: command 0x1003 tx timeout [ 2981.473235] Bluetooth: hci1: sending frame failed (-49) [ 2981.484086] Bluetooth: hci0: sending frame failed (-49) [ 2983.547775] Bluetooth: hci0: command 0x1001 tx timeout [ 2983.547841] Bluetooth: hci1: command 0x1001 tx timeout [ 2983.553168] Bluetooth: hci0: sending frame failed (-49) [ 2983.564860] Bluetooth: hci1: sending frame failed (-49) [ 2985.627854] Bluetooth: hci1: command 0x1009 tx timeout [ 2985.633226] Bluetooth: hci0: command 0x1009 tx timeout 04:06:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x40087602, &(0x7f0000000000)=0x30) 04:06:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:06:29 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910006000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:06:29 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:06:29 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 04:06:29 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r1, &(0x7f0000000280)={0x11e}, 0x269) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'broute\x00', 0x0, 0x3, 0xb1, [], 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f00000000c0)=""/177}, &(0x7f0000000200)=0x78) alarm(0x7fffffff) [ 2989.539217] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:06:29 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r1, &(0x7f0000000280)={0x11e}, 0x269) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x6, 0x7, {0x1, @raw_data="423be0d7f82c981e39603c53f0b579fdc6b4949763ebefad97f307e49ffe9a0f6beca6b9130d7e506a79f364a7629fbcf12cf4bda70e5e56abd5488fe6e141fcc9777112e15840369c1a085aa7709b048d7ca1e03fcfa625473c02a6053b0b148c57783ec9c6e03b7f80ecb964920766095a96d78e65f0e54459cfffaf5c6a67b8c3fe64abc2ec92f8460889560945f7def044b1bc872628b0acdc082d3c5a2b869c2407812ad4e15fb03b633cd04bf07d9ef9f0ffd7cbc9256149e62eb4c2e10c2202217e98fcad"}, 0x800}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x2b, @multicast1, 0x4e24, 0x2, 'ovf\x00', 0x9, 0xfff, 0x15}, {@multicast1, 0x4e21, 0x0, 0x8000, 0x1, 0x4}}, 0x44) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) [ 2989.588580] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2989.617768] Bluetooth: hci0: Frame reassembly failed (-84) [ 2989.623241] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:06:29 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 04:06:29 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910007000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:06:29 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:06:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x721a62, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x16) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000000c0)="04eaf674d8cda7a136ce5ef3688dacfc036f51e3dcc55a06e242c2da5202d7e9cade93aba11704e1a99366d880d34174c7e628e5e0559fd92d4275d599b6725b023a074964748e9d1e54ca73a9eb97f13c4e7874cd49979cbfa182fba20235581e7e9682fd88675b516fa0e207627ba0a3d073d15aa496cb26b2e76e0f5ef1cadbb6afccaa1c8e2238724bab054355fabf68117c2340a496b7ed99c339") [ 2989.919409] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:06:29 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x200, 0x0) getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(r0, 0xffffffffffffffff) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r1, &(0x7f0000000280)={0x11e}, 0x269) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r5 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r6 = dup2(r5, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r6, &(0x7f0000000280)={0x11e}, 0x269) r7 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r8 = dup2(r7, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r8, &(0x7f0000000280)={0x11e}, 0x269) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r10 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x28242) r11 = dup2(r10, 0xffffffffffffffff) r12 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r13 = dup2(r12, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r13, &(0x7f0000000280)={0x11e}, 0x269) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r11, &(0x7f0000000280)={0x11e}, 0x269) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0xe0002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000340)) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000040)={r4, r6}) [ 2989.964453] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2990.019210] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2991.627701] Bluetooth: hci0: command 0x1003 tx timeout [ 2991.633105] Bluetooth: hci0: sending frame failed (-49) [ 2993.707803] Bluetooth: hci0: command 0x1001 tx timeout [ 2993.714231] Bluetooth: hci0: sending frame failed (-49) [ 2995.787752] Bluetooth: hci0: command 0x1009 tx timeout 04:06:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000000)=0x30) 04:06:39 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 04:06:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x511900, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0xc0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x101, 0x4, 0xa, 0x7fffffff, 0xa2, 0xff, 0x7f, 0x4}, 0x20) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:06:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x77, 0xc, 0x4, 0x20000000, 0x1, {0x0, 0x7530}, {0x5, 0xc, 0x1f, 0x4, 0x7, 0xac, 'V\x003\a'}, 0x5, 0x1, @planes=&(0x7f0000000080)={0x7, 0x8, @fd, 0x5174}, 0x8, 0x0, r0}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000400)={{&(0x7f0000000340)=""/152, 0x98}, &(0x7f0000000000), 0x7}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="2300eb96", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0x10) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff09aaaaaaaaaa86dd60a4f00800282900fe0800000000000000002b00000000aaff020000000000000000000000000001860090785f635136edd77acc8fea7fef0000000000000000000004000000000284f0da52ef24571313968050378ee8240300000000000000ec3ec5e0c08944a4d37be214e104f47e54a739c632383a87f380079e5ef3c62b94246a9f12fc1f50a575afdde2feffffffffffffff9b9e9d25b1ba10178d6e689d0cfbf49e494df4bf496eaa0d7b10cedc8500d8ababdb41af78d681876887976edfb7a9cd1b115b93f36a983c83722be90e0e4d9cdb9a12e8048ca55d9fa1c5a4afc93f0e3881fba22eba0751581f9e817022e4a8b4395cc223fa2d3ad2692c2407009b04e4c353015ceeb802adb1b21d424b92e6a284690bb9e5f45da26393209c8028f8067d4658c00ae128f393fe1a71604aa814c3de86bbc6896d096a114e4997e7a6c288d131b239b8c826f3e2bf626ef9f7cd6cfc"], 0x0) 04:06:39 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691d408000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:06:39 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:06:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 2999.745499] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2999.754638] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 2999.763463] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:06:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:06:39 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@random="d2d3a970f482", @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:06:39 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691000a000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:06:39 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:06:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 2999.988526] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 2999.996064] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3000.037469] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3001.947888] Bluetooth: hci0: command 0x1003 tx timeout [ 3001.953304] Bluetooth: hci0: sending frame failed (-49) [ 3004.027887] Bluetooth: hci0: command 0x1001 tx timeout [ 3004.033281] Bluetooth: hci0: sending frame failed (-49) [ 3006.107793] Bluetooth: hci0: command 0x1009 tx timeout 04:06:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x80045432, &(0x7f0000000000)=0x30) 04:06:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x424800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:06:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:06:49 executing program 0: syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa000d0200006a2f54e10518000000e7d51b6674720c4207b6c02f5312b52af338f077814ee14b1eb0544ae28f49b12d5ae6006ee82052f05fac5f46314f9d51000000000000f6ffffffffff"], 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r1, &(0x7f0000000280)={0x11e}, 0x269) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xf}}, 0x10) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f00000001c0)) r5 = dup2(r2, 0xffffffffffffffff) syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x80000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r5, &(0x7f0000000280)={0x11e}, 0x269) bind$vsock_dgram(r5, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 04:06:49 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691000c000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:06:49 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r1) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:06:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:06:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x800, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000140)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000001c0)) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000200)=0x69) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup2(r4, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r5, &(0x7f0000000280)={0x11e}, 0x269) r6 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r7 = dup2(r6, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r7, &(0x7f0000000280)={0x11e}, 0x269) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000240)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 3010.020741] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3010.056614] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:06:49 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r1) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3010.082914] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3010.118134] Bluetooth: hci0: Frame reassembly failed (-84) 04:06:49 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(r0, 0xffffffffffffffff) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x9, 0x1000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000004c0)={0x0, 0x8000}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000540)={r3, 0x7}, &(0x7f0000000580)=0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x0, 0x1, 0x0, 'queue0\x00', 0x4}) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup2(r4, 0xffffffffffffffff) r6 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x101480, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r8 = dup2(r7, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r8, &(0x7f0000000280)={0x11e}, 0x269) write$P9_RSTATFS(r8, &(0x7f00000003c0)={0x43, 0x9, 0x1, {0x6, 0x6, 0x5, 0x93, 0xaaa5, 0x80010000000, 0x8, 0xff, 0x7fff}}, 0x43) r9 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r10 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r11 = dup2(r10, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r11, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCGPKT(r11, 0x80045438, &(0x7f00000005c0)) r12 = dup2(r9, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r12, &(0x7f0000000280)={0x11e}, 0x269) r13 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvme-fabrics\x00', 0x141000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, &(0x7f00000000c0)={0x1000, 0xfffffffc, 0x1, 'queue0\x00'}) write$P9_RLINK(r5, &(0x7f0000000280)={0x11e}, 0x269) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f0000000180)={'caif0\x00', 0x3, 0x1}) write$P9_RLINK(r1, &(0x7f0000000280)={0x11e}, 0x269) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x3, 0x101}) 04:06:49 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691000e000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:06:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 3010.252596] Bluetooth: hci1: Frame reassembly failed (-84) [ 3010.275375] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 3010.328001] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3010.377259] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3010.388053] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3012.197827] Bluetooth: hci0: command 0x1003 tx timeout [ 3012.203412] Bluetooth: hci0: sending frame failed (-49) [ 3012.267736] Bluetooth: hci1: command 0x1003 tx timeout [ 3012.273255] Bluetooth: hci1: sending frame failed (-49) [ 3014.267783] Bluetooth: hci0: command 0x1001 tx timeout [ 3014.273710] Bluetooth: hci0: sending frame failed (-49) [ 3014.347776] Bluetooth: hci1: command 0x1001 tx timeout [ 3014.353482] Bluetooth: hci1: sending frame failed (-49) [ 3016.347820] Bluetooth: hci0: command 0x1009 tx timeout [ 3016.427821] Bluetooth: hci1: command 0x1009 tx timeout 04:06:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x80045440, &(0x7f0000000000)=0x30) 04:06:59 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r1) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:06:59 executing program 0: syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) 04:06:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:06:59 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691000f000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:06:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 3020.240919] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:07:00 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3020.292144] Bluetooth: hci0: Frame reassembly failed (-84) [ 3020.293259] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3020.333596] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:07:00 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910020000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:07:00 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) 04:07:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:07:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$KDADDIO(r2, 0x400455c8, 0x131e) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:07:00 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3020.906027] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3020.934859] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3020.944386] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3022.347747] Bluetooth: hci0: command 0x1003 tx timeout [ 3022.353150] Bluetooth: hci0: sending frame failed (-49) [ 3024.427964] Bluetooth: hci0: command 0x1001 tx timeout [ 3024.433388] Bluetooth: hci0: sending frame failed (-49) [ 3026.507809] Bluetooth: hci0: command 0x1009 tx timeout 04:07:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x80086601, &(0x7f0000000000)=0x30) 04:07:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:07:10 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60a4f00800282900fe8000000000000000002b00000000aaff050000000000000000000000000001860090780000000000000000000000000000000284f0da52ef25571313968050378ee824f4dffba7163443d73289760fbd82a3d70e483b9050ea0103af68776432f166"], 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r1, &(0x7f0000000280)={0x11e}, 0x269) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x440602, 0x0) r5 = perf_event_open$cgroup(&(0x7f0000000400)={0x2, 0x70, 0x7, 0x0, 0x5, 0xff, 0x0, 0x200, 0xc081, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp, 0x8400, 0x4, 0xfffffffa, 0x9, 0x1, 0x101, 0x5}, r1, 0x80000000000f, r4, 0x8) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x1, 0x0) preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000180)=""/188, 0xbc}, {&(0x7f0000000040)}, {&(0x7f0000000240)=""/239, 0xef}], 0x3, 0x3ff) 04:07:10 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:07:10 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691003f000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:07:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x82, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0x80000001, 0x2, 0x0, 0x4, 0x1f, "9701e35a5dd7da0338e8659f48dd6cdc39c043", 0x0, 0x4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = socket$inet6(0xa, 0x4, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x9}, 0x20) r3 = dup(r2) ioctl$KDSETLED(r3, 0x4b32, 0xfffffffffffffffe) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x3b) [ 3030.495998] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3030.508762] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3030.516350] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3030.538453] Bluetooth: hci1: Frame reassembly failed (-84) 04:07:10 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) read(r0, &(0x7f0000000080)=""/11, 0xb) [ 3030.538637] Bluetooth: hci1: Frame reassembly failed (-84) 04:07:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:07:10 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:07:10 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910040000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:07:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:07:10 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3030.720333] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3030.731879] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3030.741606] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3032.588058] Bluetooth: hci1: command 0x1003 tx timeout [ 3032.594691] Bluetooth: hci1: sending frame failed (-49) [ 3032.600292] Bluetooth: hci0: command 0x1003 tx timeout [ 3032.605705] Bluetooth: hci0: sending frame failed (-49) [ 3034.677832] Bluetooth: hci0: command 0x1001 tx timeout [ 3034.677863] Bluetooth: hci1: command 0x1001 tx timeout [ 3034.677947] Bluetooth: hci0: sending frame failed (-49) [ 3034.677953] Bluetooth: hci1: sending frame failed (-49) [ 3036.747856] Bluetooth: hci0: command 0x1009 tx timeout [ 3036.748012] Bluetooth: hci1: command 0x1009 tx timeout 04:07:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x80087601, &(0x7f0000000000)=0x30) 04:07:20 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910048000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:07:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:07:20 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:07:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60a4082df3878e2ccb56e969aaf00000009ee51c964bfbd91eeaf1db1f00000000002b000000000100010000000000000000000000000001860090780000000007000000000000000000100284f0da52ef2457131300000000000000e2ec404a7cabc7834911471e69e422465a8b7433ae04d8d8f56d7c7a987f269ecf75d0449aaf4aaa8ac77dbaa3d32d95e8544ab16789e9271d6b8a36d437dc263223c9035f"], 0x0) 04:07:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x905}, 0x14}}, 0x0) [ 3040.728373] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3040.736001] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:07:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:07:20 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3040.797796] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:07:20 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000180)={0x9c0000, 0x0, 0x7b268c88, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a69, 0x5, [], @string=&(0x7f0000000100)}}) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x13, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x8000) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:07:20 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691004c000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:07:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:07:20 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3041.059162] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3041.084829] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3041.100934] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3042.907817] Bluetooth: hci0: command 0x1003 tx timeout [ 3042.913260] Bluetooth: hci0: sending frame failed (-49) [ 3044.987887] Bluetooth: hci0: command 0x1001 tx timeout [ 3044.993471] Bluetooth: hci0: sending frame failed (-49) [ 3047.067921] Bluetooth: hci0: command 0x1009 tx timeout 04:07:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000000)=0x30) 04:07:30 executing program 0: syz_emit_ethernet(0x351, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) 04:07:30 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) open(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 04:07:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:07:30 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:07:30 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306916558000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3050.962820] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3051.002917] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:07:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:07:30 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_buf(r0, 0x29, 0x2b, &(0x7f0000000100)="bebd15aa37217bd74b635a7356becfe23a75d77cf9cec3e3a1fee01e4d8bcaed2d25c4f3a8c76fa5b8a1b0deb3a18cac6337723a351e58844ace0b34c37f5979cbafd85c3f1c605b37b340720d6806ac5ee1511b30f26e3e3219dce74c3263844804ffb44e78e0dac0a7902820b6eb58fddc0ba4e72d51b566f3f59f6da3af5671ca9bd1f8d0828a47a23505fa5597321f566121af1cfcc8c4b1afbac94813685e766d411debeb5ed6d81a5300693a75d3e6c794c65dee4cb1b88f85c07782ca1aad9980f9dcf85512e9dd7c4d996eb5895a67ea0d32d904ba290054741b08938c5d28b8", 0xe4) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60a4f008002829d6e91100fe8000000000000000002b00000000aaff020000000000000000000000000001860090780000000000000000000000000000000284f0da52ef24571313968050378ee824f4"], 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x420580, 0x0) setsockopt$inet6_int(r1, 0x29, 0xc9, &(0x7f0000000080)=0xfffffe00, 0x4) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x58) 04:07:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3051.017859] Bluetooth: hci0: Frame reassembly failed (-84) [ 3051.040386] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:07:30 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910060000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:07:30 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60a4f00800282900fe800000002b00000000aaff02000000000000000000000000000186009078000000000000000000000000000000fd84f0da52ef24571313968050378ee824f4dffba7"], 0x0) 04:07:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3051.248398] Bluetooth: hci1: Frame reassembly failed (-84) [ 3051.256474] Bluetooth: hci1: Frame reassembly failed (-84) [ 3051.343489] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3051.366399] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3051.387922] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3053.067727] Bluetooth: hci0: command 0x1003 tx timeout [ 3053.073157] Bluetooth: hci0: sending frame failed (-49) [ 3053.317835] Bluetooth: hci1: command 0x1003 tx timeout [ 3053.324407] Bluetooth: hci1: sending frame failed (-49) [ 3055.147762] Bluetooth: hci0: command 0x1001 tx timeout [ 3055.153211] Bluetooth: hci0: sending frame failed (-49) [ 3055.387815] Bluetooth: hci1: command 0x1001 tx timeout [ 3055.393215] Bluetooth: hci1: sending frame failed (-49) [ 3057.227778] Bluetooth: hci0: command 0x1009 tx timeout [ 3057.467800] Bluetooth: hci1: command 0x1009 tx timeout 04:07:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:07:40 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 04:07:40 executing program 0: 04:07:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000000)=0x30) 04:07:40 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306915865000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:07:40 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r1, &(0x7f0000000280)={0x11e}, 0x269) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000080)=0x5) [ 3061.193737] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3061.214500] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3061.230904] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:07:41 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:07:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:07:41 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910068000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:07:41 executing program 0: fanotify_init(0x8, 0x40000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa9100060081004c0086dd60000000ee272900fe8000000000000000002b00000000a3ff0200000000007a2d7b6454da7cb6c83b65ed0ad379000000000000000001860090780000000001000000000000000000000284f0da52ef"], 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000100)={0x0, 0xcb, 0x0, 'queue1\x00', 0xffff}) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) 04:07:41 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:07:41 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40000, 0x0) r2 = open(0x0, 0x8001141042, 0x0) write(r2, &(0x7f0000000000), 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 04:07:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0xc0189436, &(0x7f0000000000)=0x30) 04:07:41 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3061.863255] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3061.871761] Bluetooth: hci0: Frame reassembly failed (-84) [ 3061.887269] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3061.896281] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:07:41 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) r0 = request_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000002c0)='\xe1\x00', 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r0, 0x0, r1) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r1) [ 3061.930771] Bluetooth: hci1: Frame reassembly failed (-84) [ 3061.946951] Bluetooth: hci1: Frame reassembly failed (-84) 04:07:41 executing program 0: syz_emit_ethernet(0x13d8, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x13a2, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @empty, @dev={0xfe, 0x80, [], 0x3e}, [{0x3, 0x13, "139531b5bdc8f371d487f11e232cdb3010fca7a967c229812afbf3f6441e19e92a1908d0a88467a08ab314d038fe8f056177d9933c5ab66dd81ad4e8dca39f2ad53dde7043fe6f9a87c6b085aab0ecae1580fe18b24efec817bddddad8421f735409df30e8ca569bee6472abacf20f0527eb9bcfe89223d9d05796af4b3f7c688ae1362af6a929c890ef240b1270e9ef789ceec807a2a894"}, {0x4, 0x15, "72c5b7daff3087612e38a6303e67711b897779c86fca6bc2c283949e13231ab536095b517cd5ce20543fc35a949634771489951c48ce9ce0ed1265600ef5d827327ceaaea066ed78e07f2e8a52648da8b2eb88dd32f118e814792b1bbdcb91b33ba15ead9bf2e9e430c19951d7b5032afc534f8f44b85d7b44fd0661c412fe38ea974ae873ef81650e26711d8d287812ac068a8f630005d0ed4928f8fcfa57e53697e3ee322e"}, {0x1, 0x0, '`'}, {0x1f, 0x13, "f6ee61973b2677301e91506670354c9db165717f724db09c3ece154ac900ecf6a1ef218a0710aea8e65cafc86aa436be2575234572bcbf9df015603ae2d6763f59d495f0428c2119bb95701cd9d40a42e8f75f9dee9c618786e5ac2fdf36b4e3fc5530c13d99b0a3d088c53e7557db37c570d76a95ec261704078a121ab960c7d226066e4047b6100dd7df0f977db9df57cd6d7ef0cd96"}, {0x5, 0x13, "7c78c4b2277db40ad520ba6dda072bc05ed594716de83a35293fc5e786dc7857c39d82e1b55ad8906594a1559e4a7284dc233f763914b7f718164df2f73c618808f76d3c9683333bbb47b11e03fada87bb6598044d6db499346e576f4422012521a182234d9d610a7f3f08c1d645dcfa2c0efac9acac2a8bacfaff223db47c41a04649455acc33a9f377ab8f35123364b32a06fe7198a6f1a89a62"}, {0xb, 0x12, "5fdd14e8ca413f200888ea8b4000aaae9bb7b41e6461beee4f528abec22d3dfa17d88814167c34b84d7a7ec7d394586a8e6fbc7daeb353ca8f824441fdfd1daf9808d7a53419e950f886f556cd20d50f2785cef18bd4fb1c37603452c4e2afdee3427c50f8d54b23b438d79d043bd9abfdb8bdddd80ba091ae601eeeffb6847a2ccf29ef35ebd3c2870e723f8844d5f5a50a7e76"}, {0x3c, 0x200, "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"}, {0x22, 0xc, "b134e7050362ea3e08a13a341661210b4799b1a33d1e30ea2b70e36c8f67469c842874b406207bae2925a61e6831f8b5e94ffe08fa41db9e4d2fed1b4ae7ebcfbc1a51531ffe31aa617559021dad38f61bd5f26c8f8afe5bd44475c804d2c01b6811d21faa"}]}}}}}}, 0x0) 04:07:41 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691006c000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:07:41 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:07:41 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @rand_addr="daa0f6fc95acb704be117484c1e3a4a5", @remote, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 3062.112148] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3062.147351] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3062.172475] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:07:42 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3063.947738] Bluetooth: hci0: command 0x1003 tx timeout [ 3063.947993] Bluetooth: hci1: command 0x1003 tx timeout [ 3063.953208] Bluetooth: hci0: sending frame failed (-49) [ 3063.963889] Bluetooth: hci1: sending frame failed (-49) [ 3066.027784] Bluetooth: hci1: command 0x1001 tx timeout [ 3066.028016] Bluetooth: hci0: command 0x1001 tx timeout [ 3066.033213] Bluetooth: hci1: sending frame failed (-49) [ 3066.038697] Bluetooth: hci0: sending frame failed (-49) [ 3068.107736] Bluetooth: hci1: command 0x1009 tx timeout [ 3068.118651] Bluetooth: hci0: command 0x1009 tx timeout 04:07:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:07:51 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910074000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:07:51 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 04:07:51 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r1, &(0x7f0000000280)={0x11e}, 0x269) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0x9d0000, 0x7ff, 0xffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990a66, 0x28000000, [], @value64=0x600000}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb8137ffff00750604ffffffff96feceea94e00006000000000000000000000001947bb207711634a078188c79056e5f98811ebee68f042d2cdee690c8573876d3a79bf55c5b9469c987a8ed4e754d56ef6053dd57ecb3b6b84b908f52193dd934d7d341d73a94c8284d90538d78c6a2decc3d767becd4fa"], 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000000)) 04:07:51 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:07:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0xc020660b, &(0x7f0000000000)=0x30) [ 3072.073052] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3072.116087] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:07:51 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40000, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3209}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 04:07:51 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3072.161656] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3072.168273] Bluetooth: hci0: Frame reassembly failed (-84) [ 3072.197923] Bluetooth: hci0: Frame reassembly failed (-84) 04:07:51 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r1, &(0x7f0000000280)={0x11e}, 0x269) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) fstat(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000080)='./file0\x00', r3, r5, 0x1000) 04:07:51 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691007a000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:07:52 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) 04:07:52 executing program 2: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3072.361919] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3072.381466] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3072.392156] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3074.187714] Bluetooth: hci0: command 0x1003 tx timeout [ 3074.187973] Bluetooth: hci1: command 0x1003 tx timeout [ 3074.198514] Bluetooth: hci0: sending frame failed (-49) [ 3074.204273] Bluetooth: hci1: sending frame failed (-49) [ 3076.267929] Bluetooth: hci1: command 0x1001 tx timeout [ 3076.273255] Bluetooth: hci0: command 0x1001 tx timeout [ 3076.273312] Bluetooth: hci1: sending frame failed (-49) [ 3076.285798] Bluetooth: hci0: sending frame failed (-49) [ 3078.347848] Bluetooth: hci0: command 0x1009 tx timeout [ 3078.353414] Bluetooth: hci1: command 0x1009 tx timeout 04:08:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 04:08:01 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:08:01 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691fe80000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:08:01 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xffffff22) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0x8000, 0x4}, @mss={0x2, 0xfff}], 0x2) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x4}, 0x10) socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60a4f00800282900fe8000000000000000002b00000000aaff0200000000000000000000000000018600907800000000a6880000000000000000000284f0da52ef24571313968050378ee824f4dffba7"], 0x0) 04:08:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:08:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 3082.319078] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3082.340579] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:08:02 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x8a, 0x5, 0x4, 0x2, 0x295, {0x0, 0x7530}, {0x2, 0x2, 0xff, 0x40, 0x1, 0x7, "60011f34"}, 0x7fffffff, 0x1, @offset=0xda9, 0x3, 0x0, 0xffffffffffffffff}) ioctl$USBDEVFS_RESET(r1, 0x5514) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000011}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040001}, 0x8001) r3 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f0000000080)) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:08:02 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910081000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:08:02 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3082.472678] Bluetooth: hci2: Frame reassembly failed (-84) 04:08:02 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x10, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 04:08:02 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691fec0000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3082.532581] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3082.550756] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3082.563560] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:08:02 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3082.683858] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3082.694888] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3084.427841] Bluetooth: hci1: command 0x1003 tx timeout [ 3084.433267] Bluetooth: hci0: command 0x1003 tx timeout [ 3084.434859] Bluetooth: hci1: sending frame failed (-49) [ 3084.440790] Bluetooth: hci0: sending frame failed (-49) [ 3084.507892] Bluetooth: hci2: command 0x1003 tx timeout [ 3084.513527] Bluetooth: hci2: sending frame failed (-49) [ 3086.507839] Bluetooth: hci0: command 0x1001 tx timeout [ 3086.515004] Bluetooth: hci0: sending frame failed (-49) [ 3086.520706] Bluetooth: hci1: command 0x1001 tx timeout [ 3086.526530] Bluetooth: hci1: sending frame failed (-49) [ 3086.587863] Bluetooth: hci2: command 0x1001 tx timeout [ 3086.593526] Bluetooth: hci2: sending frame failed (-49) [ 3088.587775] Bluetooth: hci0: command 0x1009 tx timeout [ 3088.587878] Bluetooth: hci1: command 0x1009 tx timeout [ 3088.667825] Bluetooth: hci2: command 0x1009 tx timeout 04:08:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 04:08:12 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60a4f00800282900fe8000000000000000002b00000000aaff02000000000000000000000000000186009078000000000034076dafd9a3dc8600000284f0da52ef24571313968050378ee802f4dffba714011dbc89485e8ee893f103e7ff1b5e28d2fb06"], 0x0) getrusage(0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r0, &(0x7f00000001c0)=""/247, 0xf7, 0x10002, &(0x7f0000000000)={0x9, @remote={[], 0x2}}, 0x12) 04:08:12 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069101d0000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:08:12 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:08:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:08:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x3) [ 3092.596221] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:08:12 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3092.639675] Bluetooth: hci0: Frame reassembly failed (-84) [ 3092.670491] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:08:12 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x2100002, &(0x7f0000000440)=ANY=[@ANYBLOB="66759f633d46494c455f434845224b2c00c725c9d8fc29b15d31eb458493df56aa411207938496c892e7867ae94960a8a5af123e09d80010f26073d5f73259ffad7685c47d3014b889a8c32ce79243a408fd635cb1a7c05e7d7ab1b3f42861212077f1af7ed821918cf60feff639f05bea34e34877cf6d5efbc07152a5e2de4efa3e39a78b2904e6978e9accfd3ba1908ab35fc71cfd888476e945233a89a1c4b48902d306bef2fa236cd739be64341bde2f1c9f132b86"]) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x40000000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x5c}}, 0x4000) syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) [ 3092.690387] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:08:12 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069108d4000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:08:12 executing program 1: socket$caif_stream(0x25, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:08:12 executing program 0: syz_emit_ethernet(0x14d6, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x14a0, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[@srh={0x3c, 0x12, 0x4, 0x9, 0x9, 0x0, 0x20, [@rand_addr="7b12fd2052d27dbdd7f93b93fa831585", @mcast1, @rand_addr="951a714f44afc03eb349758287a1d312", @loopback, @empty, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, @remote]}, @hopopts={0xff, 0x1, [], [@calipso={0x7, 0x8, {0x2, 0x0, 0xf4, 0xecdc}}]}, @srh={0x11, 0x8, 0x4, 0x4, 0x81, 0x40, 0x8, [@loopback, @remote, @mcast2, @loopback]}, @fragment={0x2c, 0x0, 0x3, 0x1, 0x0, 0x1c, 0x66}, @dstopts={0x88, 0x20, [], [@ra={0x5, 0x2, 0x7e69}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x27}}, @ra={0x5, 0x2, 0x2}, @generic={0xff, 0x6c, "fc96d4e9ef47926280e608f8f2bc7604bcde92911beb931d2057521b57b193f87c4d635f84ac9392b1cf7f1cbbbc374dafc2fa200f768752e3a934f046049feb1b44e68865b54ef6406200f1a8615d81f89820f6a6aa51bff1eb5d6730d1638f7a8ec633200eeeaaba02f24d"}, @jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x40, {0x0, 0xe, 0x1, 0xde48, [0x80000001, 0x75a, 0x3, 0x3, 0x9, 0xa1, 0xfffffffffffffff7]}}, @generic={0x2e, 0x34, "ff29461717e290191c11c63df070c57da68eb44910eedc569a99eb7a23da6a7d7fd0a91250253dffff29dfb0e3e09a9b521d1d5d"}]}, @fragment={0x3b, 0x0, 0xa2, 0x1, 0x0, 0x3, 0x68}, @dstopts={0x84, 0x217, [], [@generic={0x60, 0x97, "16d6d9d50689e46b54a36336633a5844450f14f43e40cf44cbd689b58a0943724e7ae684ee9b046364328ca5abaa836c73b45966a1dde86d97d22da4d2b2d3805563f0f086cb155fb9c55ee6066e82651ae134f283a674603a368f56899dfa9e6ddf7222c698320fedcfdd8c587cb78c1e3a3287a3bd20629a5314464a3a59260c61f4574183fd6897d3368dbaa88824056b6b39b2584a"}, @ra={0x5, 0x2, 0xfff7}, @generic={0x80, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x40}, @hao={0xc9, 0x10, @ipv4={[], [], @rand_addr=0x1}}]}, @routing={0x29, 0x8, 0x2, 0x1, 0x0, [@mcast2, @rand_addr="8263c15087509413da2868c3a2e45609", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="57b66e4d9792504dd50ca3979b1d27a2"]}, @fragment={0xc1, 0x0, 0x5, 0x1, 0x0, 0x1, 0x67}, @dstopts={0x3b, 0x27, [], [@calipso={0x7, 0x38, {0x83f98992d1989a03, 0xc, 0x80, 0x2, [0x6, 0x6, 0x3ff, 0x5, 0x6, 0x5]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0xa}}, @pad1, @calipso={0x7, 0x48, {0x3, 0x10, 0x4, 0x8000, [0x5, 0xe1a5, 0xc2b, 0x6, 0x7fffffff, 0x80, 0x81, 0x0]}}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x18, {0x1, 0x4, 0x4, 0x5, [0x0, 0x400]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x8]}}, @calipso={0x7, 0x58, {0x2, 0x14, 0x20, 0x1, [0x7ff, 0x3, 0x1, 0x6, 0x1f, 0xda9c, 0x3, 0x5, 0x6, 0x1ff]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x5, 0x5c2, [0x5]}}, @jumbo={0xc2, 0x4, 0xcb}]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:08:12 executing program 0: syz_emit_ethernet(0x92, &(0x7f0000000000)={@empty, @empty, @void, {@mpls_mc={0x8848, {[{0x5}, {0x4}, {0x6}, {0x3ff, 0x0, 0x1}, {}], @generic="c385a027a4f9d35d2b441978b7bd2955e57a06f1b33c60a1c98150cf4143f0ef947191c7f029950795e1cf8a583dfea5030dc45f840c82664277586d6fb14091dbe0ce9258798d0d3734d84aa81557801cbe5d02a43b86576a3763fe715c76b8a496a47040088ffa398d8e3f342030dd"}}}}, 0x0) pipe2(&(0x7f0000000140), 0x4000) socket$netlink(0x10, 0x3, 0xb) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x109040, 0x0) read$usbfs(r0, &(0x7f0000000100)=""/1, 0x1) [ 3092.877002] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3092.885090] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3092.892785] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3094.677762] Bluetooth: hci0: command 0x1003 tx timeout [ 3094.683252] Bluetooth: hci0: sending frame failed (-49) [ 3094.747727] Bluetooth: hci2: command 0x1003 tx timeout [ 3094.747841] Bluetooth: hci1: command 0x1003 tx timeout [ 3094.753227] Bluetooth: hci2: sending frame failed (-49) [ 3094.758818] Bluetooth: hci1: sending frame failed (-49) [ 3096.747764] Bluetooth: hci0: command 0x1001 tx timeout [ 3096.753186] Bluetooth: hci0: sending frame failed (-49) [ 3096.827813] Bluetooth: hci2: command 0x1001 tx timeout [ 3096.827840] Bluetooth: hci1: command 0x1001 tx timeout [ 3096.838477] Bluetooth: hci2: sending frame failed (-49) [ 3096.849683] Bluetooth: hci1: sending frame failed (-49) [ 3098.827761] Bluetooth: hci0: command 0x1009 tx timeout [ 3098.907786] Bluetooth: hci1: command 0x1009 tx timeout [ 3098.913182] Bluetooth: hci2: command 0x1009 tx timeout 04:08:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 04:08:22 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100f0000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:08:22 executing program 1: socket$caif_stream(0x25, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:08:22 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r1, &(0x7f0000000280)={0x11e}, 0x269) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000040)={0xe, 0x1, 0x5}) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffaaaaaaaaaaaa86dd60a4f00800282900fe8000000000000000002b00000000aaff020000000000000000000000000001860090780000000000000001000000000080000284f0da52ef24571313968050378ee824f4dffba739c1fcb4ce3c2ebc5f1f0a463e3ebc8905c99354aa"], 0x0) r2 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='$\\\x8c&#\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r2) 04:08:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:08:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4) [ 3102.819079] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3102.843421] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3102.866782] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:08:22 executing program 1: socket$caif_stream(0x25, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:08:22 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60a4f00800282900fe8007ea9e77c6f400000000000000002b00000000ab7202000000f5ff000000000000000001860090780000000000000000000000000000000284f0da52ef24571313d08050378ee824f4dffba7"], 0x0) 04:08:22 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100fc000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3102.914299] Bluetooth: hci0: Frame reassembly failed (-84) 04:08:22 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa18aa86dd60a4f00800282900fe8000000000000000002b00000000aaff020000040072000000000000629646b929c35c0c39a2f27ca85fab8b00000001860090780000000000000000000000000000000284f0da52ef24571313968050378ee824f4dffb"], 0x0) 04:08:22 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, 0x0, 0x0, 0x4010) 04:08:22 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069180fe000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3103.043179] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3103.060191] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3103.069124] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3103.189319] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3103.224139] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3103.235083] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3104.987685] Bluetooth: hci0: command 0x1003 tx timeout [ 3104.994025] Bluetooth: hci0: sending frame failed (-49) [ 3104.999861] Bluetooth: hci1: command 0x1003 tx timeout [ 3105.005293] Bluetooth: hci1: sending frame failed (-49) [ 3105.067742] Bluetooth: hci2: command 0x1003 tx timeout [ 3105.073260] Bluetooth: hci2: sending frame failed (-49) [ 3107.067745] Bluetooth: hci1: command 0x1001 tx timeout [ 3107.073091] Bluetooth: hci0: command 0x1001 tx timeout [ 3107.073150] Bluetooth: hci1: sending frame failed (-49) [ 3107.078548] Bluetooth: hci0: sending frame failed (-49) [ 3107.157751] Bluetooth: hci2: command 0x1001 tx timeout [ 3107.163189] Bluetooth: hci2: sending frame failed (-49) [ 3109.147773] Bluetooth: hci1: command 0x1009 tx timeout [ 3109.157831] Bluetooth: hci0: command 0x1009 tx timeout [ 3109.227816] Bluetooth: hci2: command 0x1009 tx timeout 04:08:32 executing program 0: syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@broadcast, @local, @val={@void, {0x8100, 0x6, 0x1, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x10, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xdb, 0x40, 0x4142, 0xff, 0x81}}}}}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x7fffffff, 0x70000, {}, {r1}, 0xbc, 0xffffffffffffff01}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r4, r3) chown(&(0x7f0000000080)='./file0\x00', r2, r3) 04:08:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 04:08:32 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, 0x0, 0x0, 0x4010) 04:08:32 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691c0fe000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3113.045906] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3113.084606] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3113.092867] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:08:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:08:33 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100ff000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:08:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 04:08:33 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, 0x0, 0x0, 0x4010) 04:08:33 executing program 0: prctl$PR_SET_TSC(0x1a, 0x3) r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r1, &(0x7f0000000280)={0x11e}, 0x269) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0x800) write$selinux_create(r2, &(0x7f0000000340)=@objname={'system_u:object_r:iptables_conf_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x1000, 0x20, './file0\x00'}, 0x51) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c0045005, &(0x7f0000000000)=0x7b) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$int_in(r4, 0x800000c0045005, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x51003, 0x0) ioctl$int_in(r5, 0x800000c0045005, &(0x7f0000000080)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x14041, 0x0) ioctl$int_in(r6, 0x0, &(0x7f0000000000)=0x7b) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$int_in(r6, 0x800000c0045005, &(0x7f0000000080)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r7, 0x800000c0045005, &(0x7f0000000000)=0x7b) ioctl$int_in(r7, 0x800000c0045005, &(0x7f0000000080)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r8, 0x800000c0045005, &(0x7f0000000000)=0x7b) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$int_in(r8, 0x800000c0045005, &(0x7f0000000080)=0x1007b) [ 3113.673778] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:08:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 3113.716511] Bluetooth: hci1: Frame reassembly failed (-84) [ 3113.722852] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 3113.724673] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3113.750976] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:08:33 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100000011000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:08:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:08:33 executing program 0: syz_emit_ethernet(0x1e, &(0x7f0000000000)={@broadcast, @local, @void, {@can={0xc, {{0x1, 0x0, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "c082185fd8c9ed35"}}}}, 0x0) [ 3113.887429] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3113.897859] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3115.157765] Bluetooth: hci0: command 0x1003 tx timeout [ 3115.163262] Bluetooth: hci0: sending frame failed (-49) [ 3115.788118] Bluetooth: hci1: command 0x1003 tx timeout [ 3115.793519] Bluetooth: hci1: sending frame failed (-49) [ 3117.227794] Bluetooth: hci0: command 0x1001 tx timeout [ 3117.233219] Bluetooth: hci0: sending frame failed (-49) [ 3117.867919] Bluetooth: hci1: command 0x1001 tx timeout [ 3117.874727] Bluetooth: hci1: sending frame failed (-49) [ 3119.307802] Bluetooth: hci0: command 0x1009 tx timeout [ 3119.947752] Bluetooth: hci1: command 0x1009 tx timeout 04:08:42 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100000012000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:08:42 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 04:08:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 04:08:42 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r1, &(0x7f0000000280)={0x11e}, 0x269) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000004c0)={0x400}, 0x4) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x30c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2033}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28e5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x45}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x97}]}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x530}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @local, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x46}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x32}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0xc004}, 0x40) 04:08:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:08:43 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) [ 3123.283688] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3123.295025] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.4'. 04:08:43 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/269], 0x0) 04:08:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:08:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 04:08:43 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100000014000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:08:43 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 04:08:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x7fff, 0x2, 0x7fff}, 0x7, [0x81, 0x1, 0x200, 0x1, 0x9, 0xe39f, 0x0, 0x8, 0x1, 0x3, 0x3, 0xf46, 0x6, 0x38, 0xa000000, 0xeb00000, 0x4, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x1f17, 0xdba, 0x2, 0x10000, 0x8, 0x0, 0xfffffffe, 0xffffffff, 0xa61, 0x96, 0x40000000, 0x7ff, 0x7fff, 0x9, 0x1, 0xffffffc1, 0x3, 0x6, 0x7fff, 0x5, 0xd66a, 0x80, 0x5, 0xfffffffb, 0x0, 0x8, 0x8, 0x1, 0x80000000, 0x2, 0x8001, 0x40, 0x3d, 0x7f, 0x10001, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x7ff, 0x8], [0x1, 0xfffffffb, 0x9, 0xfffffe01, 0x2b33, 0x4, 0x3, 0x3, 0x200, 0x8, 0x6, 0x3, 0xfffffff8, 0x5f9, 0x6, 0x0, 0x369d, 0x0, 0x80000001, 0x7, 0x5, 0x1ff, 0x4, 0x577, 0x1, 0x6, 0x0, 0x4, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x100, 0x3, 0x9, 0x0, 0x20, 0x0, 0x4, 0x94b, 0x81, 0x6, 0x0, 0x10001, 0x7ff, 0x10001, 0x0, 0x1b, 0x4, 0xc6, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8, 0x2, 0xfffffffb, 0x3ff, 0x0, 0x0, 0x2, 0x7fff], [0x7, 0x4, 0x1, 0x2, 0x2, 0x3, 0x8e1, 0x500, 0x4, 0x200, 0x52, 0x20, 0x9, 0x85d063a1, 0x5, 0x9, 0x5, 0x10001, 0x7480, 0x7, 0xd70, 0x7fffffff, 0x4, 0xffff, 0x1, 0x20, 0x800, 0xe353, 0x0, 0x5, 0xa9, 0x73, 0x1, 0xb3, 0x30, 0x200, 0x7fffffff, 0x1000, 0x2, 0xfffff2c8, 0x8bd, 0x8001, 0x7ff, 0x400, 0x80, 0x9, 0x7ff, 0x8001, 0xffffffc1, 0x1f, 0x3ff, 0x5, 0x29, 0x6082, 0x5, 0x6, 0x2, 0x80, 0x200, 0x1e5, 0x100, 0x8, 0x4, 0x3759], [0x4, 0x800, 0x80, 0xe3, 0x0, 0x3ff, 0xe7, 0x100, 0x3, 0x5, 0x10000, 0x80000001, 0x9, 0x8, 0x5, 0x4000000, 0x35, 0x2, 0x1, 0xfffffe01, 0x100, 0x7ff, 0x7ff, 0x2, 0x7fffffff, 0xffff0001, 0x3, 0x5, 0x20, 0x5, 0xe19a, 0x100, 0x8, 0x1, 0x2, 0xfff, 0x1, 0x8001, 0x6, 0x1, 0x81, 0x4, 0x6, 0x100, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x101, 0xffff, 0x2546, 0x1, 0x2, 0x6, 0x3, 0x2183, 0x3f, 0x7, 0x1fe5829f, 0x10001, 0x9, 0xad50]}, 0x45c) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:08:43 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4010) [ 3123.912227] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3123.937834] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.4'. 04:08:43 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910000001f000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3124.000349] Bluetooth: hci1: Frame reassembly failed (-84) [ 3124.010836] Bluetooth: received HCILL_WAKE_UP_IND in state 2 04:08:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) r3 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 3124.141077] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3124.155115] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3125.387719] Bluetooth: hci0: command 0x1003 tx timeout [ 3125.393264] Bluetooth: hci0: sending frame failed (-49) [ 3126.027767] Bluetooth: hci1: command 0x1003 tx timeout [ 3126.033973] Bluetooth: hci1: sending frame failed (-49) [ 3126.267760] Bluetooth: hci2: command 0x1003 tx timeout [ 3126.273239] Bluetooth: hci2: sending frame failed (-49) [ 3127.467795] Bluetooth: hci0: command 0x1001 tx timeout [ 3127.473326] Bluetooth: hci0: sending frame failed (-49) [ 3128.107752] Bluetooth: hci1: command 0x1001 tx timeout [ 3128.113161] Bluetooth: hci1: sending frame failed (-49) [ 3128.357787] Bluetooth: hci2: command 0x1001 tx timeout [ 3128.363186] Bluetooth: hci2: sending frame failed (-49) [ 3129.557830] Bluetooth: hci0: command 0x1009 tx timeout [ 3130.187774] Bluetooth: hci1: command 0x1009 tx timeout [ 3130.427764] Bluetooth: hci2: command 0x1009 tx timeout 04:08:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 04:08:53 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100000039000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:08:53 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4010) 04:08:53 executing program 0: syz_emit_ethernet(0xd9, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffff8489ed279f9d810039000805020113d9619fcc9751130ffd7599d6d17987a0d844d0bfeb41a4ce6a79557847725f053af5a3132a48540426b63149a686a22a6c4df17bd2769cfc1b18be4ec74f72aff9232c45d5196e200032663ae56717ae8d322101c7bbb99862b59dbfaae771908f0cc14951cce2f85dd2c92c8458fa9672cc7c71f214e7b304bfded409d2f84d8594bb2d29417dfc0d66e40433ec7dabf2cdb5a5b34bdc0d38bdd802336223fcb43326e7e7a3233c1834e1105a3c94bf85bad332f3944accbf8eab9f3eea8b669754e1fc3f66822c695404"], 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/195, 0xc3}, {&(0x7f0000000180)=""/208, 0xd0}, {&(0x7f0000000280)=""/210, 0xd2}, {&(0x7f0000000380)=""/8, 0x8}], 0x4, &(0x7f0000000400)=""/32, 0x20}, 0x80000000) syz_emit_ethernet(0x5e, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60a4f00800282900fe8000000000000040002b00000220aaff020000000000000000000000000001860007000000000000000000000000000000001284f0dad0d4aa0d8f52ef24571313968050378ee824f4dffba7"], 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = gettid() ptrace(0x10, r2) ptrace$getregs(0xc, r2, 0x200, &(0x7f00000007c0)=""/207) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) r5 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0x5008, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(r11, 0xc0106426, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r8, 0xc010641d, &(0x7f0000000140)={r12, &(0x7f0000000100)=""/16}) ioctl$DRM_IOCTL_GET_CTX(r5, 0xc0086423, &(0x7f0000000000)={r12, 0x7}) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000000)={r12, 0x3}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000600)={0x980000, 0x3, 0xffc, r1, 0x0, &(0x7f00000005c0)={0x990a76, 0x100, [], @p_u16=&(0x7f0000000580)=0x9}}) syz_open_pts(r13, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 04:08:53 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100000052000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3133.509313] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3133.616324] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.4'. 04:08:53 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffb6b0ba71fb30ccdfaa86dd60a4f00800282900fe8000000000000000002b00000000aa00020000000000100000000000000001860090780000000000000000000000000000000284f0da52ef24571313968050378ee824f4dffba7"], 0x0) 04:08:53 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4010) 04:08:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:08:53 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100000053000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3134.152382] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.4'. 04:08:53 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910002000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:08:53 executing program 0: syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60a4f008002829004b9d9a77b0cd5656765c8320fe8000000000000000002b00000000aaff020000000000000000000000000001860090380000000000000000000000004ce5000284f0da52ef24571313968050378ee824f4dffba7f2cf518bf1d65bea18948d73102fb8f56a33c6c96f497712e69c930cab21da816c42"], 0x0) [ 3134.201312] Bluetooth: hci1: Frame reassembly failed (-84) [ 3134.202660] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 3134.311757] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3134.319571] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3134.327241] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:08:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x4, 0x305d00) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:08:54 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)}}], 0x2, 0x4010) [ 3135.547839] Bluetooth: hci0: command 0x1003 tx timeout [ 3135.553433] Bluetooth: hci0: sending frame failed (-49) [ 3136.267721] Bluetooth: hci1: command 0x1003 tx timeout [ 3136.273484] Bluetooth: hci1: sending frame failed (-49) [ 3136.837787] Bluetooth: hci2: command 0x1003 tx timeout [ 3136.843221] Bluetooth: hci2: sending frame failed (-49) [ 3137.627749] Bluetooth: hci0: command 0x1001 tx timeout [ 3137.633194] Bluetooth: hci0: sending frame failed (-49) [ 3138.347788] Bluetooth: hci1: command 0x1001 tx timeout [ 3138.353231] Bluetooth: hci1: sending frame failed (-49) [ 3138.907787] Bluetooth: hci2: command 0x1001 tx timeout [ 3138.913181] Bluetooth: hci2: sending frame failed (-49) [ 3139.707747] Bluetooth: hci0: command 0x1009 tx timeout [ 3140.427783] Bluetooth: hci1: command 0x1009 tx timeout [ 3140.987795] Bluetooth: hci2: command 0x1009 tx timeout 04:09:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 04:09:03 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60a4f00800282900fe800000000fe299e513b364693f37e10417fad4270000f1066db37ac1eb5e2e8dce0000002b00000000aaff020000000000000000000000000001860090780000000000000000000000000000000284f0da52ef24571313968050378ee824f4dffba7"], 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) 04:09:03 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910003000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:09:03 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)}}], 0x2, 0x4010) 04:09:03 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60a4f00800282900fe8000000000000000002b00000000aaff020000000000000000000000000001860090780000000000000000000000000000000284f0da52ef24571313968050378ee824f4dff9a71a5f6e1a92c018738bf4a9c4448f74a14f517ea04ef916945cbf6413255cad4822266f0758d641624a42e770de1c86c5f1534dbccaa9405feffb62ec884c2099d742cbb582db5a8c772934953b3cf4ab0c62f60a4496f5ba4d2fb6aec8f166ac64043c45fda3d97421385529cbfc327efb491e84ef1e650dda391e77a008b1"], 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r1, &(0x7f0000000280)={0x11e}, 0x269) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000080)=0xffffffff00000001) r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x723003, 0x0) [ 3143.748899] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3143.760037] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3143.781134] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:09:03 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910004000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3143.914853] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3143.922832] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3143.931730] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:09:04 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)}}], 0x2, 0x4010) 04:09:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 04:09:04 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910005000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:09:04 executing program 0: syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffe9ffffaaaaaaaaaaaa86dd60a4f00800282900fe800000000000000000ab00000000aaff020000000000000000000000000001860090780000000000000000000000000000000284f0da52ef24571313968050378ee824f4dffba78e6e161f6c0e970d3131f524d07c6865342adf7e4a7f0ac0316fa7d3d190d97c8334a65ad4e866c044f4ba4cc5ad70ef6ec19b73cb159748a3d06761554ca18dc05a772b75646a1a45713a440d83bf96c8238a2dfc2c7e14ee46b2847fbe139f488e4f2185e59b25b77b0730005daf"], 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)="8f3f361aa9b53f9f45b5e0fb6d391aadc0f6ccf02e1a5bcdff00a9db2cd006982813282ee3bf189376cb92a50ab07dbda36c9daecaa78b8ae2d9e222ff5faccaada01c957e9669a6ebfe2b325692d0c865ef6a93b36068d4e295d0f973a746c3633208c994e39a2bcf3da971ef15a041f743e13a66ee60b01937f21c0e2014f1d948093b45e9ac0174bcff232d1bea1cfb1de37f72fd9eaa93d58d63f605a865c2b633becee1115937bd34621988a04bbde9ec1775fe0a7dfcb220e5b2dad684fb57dab4790824cdb2bf360c9acfeb06fd6cfcd6523bb671f99ac1f14cd15feb171c8ed4d694", 0xe6) [ 3144.386485] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3144.400244] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3144.413286] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3144.457526] Bluetooth: hci1: Frame reassembly failed (-84) 04:09:04 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910006000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:09:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 3145.023313] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3145.867754] Bluetooth: hci0: command 0x1003 tx timeout [ 3145.873255] Bluetooth: hci0: sending frame failed (-49) [ 3146.507797] Bluetooth: hci1: command 0x1003 tx timeout [ 3146.513257] Bluetooth: hci1: sending frame failed (-49) [ 3147.067711] Bluetooth: hci2: command 0x1003 tx timeout [ 3147.073121] Bluetooth: hci2: sending frame failed (-49) [ 3147.947818] Bluetooth: hci0: command 0x1001 tx timeout [ 3147.953329] Bluetooth: hci0: sending frame failed (-49) [ 3148.587797] Bluetooth: hci1: command 0x1001 tx timeout [ 3148.593276] Bluetooth: hci1: sending frame failed (-49) [ 3149.147729] Bluetooth: hci2: command 0x1001 tx timeout [ 3149.153122] Bluetooth: hci2: sending frame failed (-49) [ 3150.027753] Bluetooth: hci0: command 0x1009 tx timeout [ 3150.667743] Bluetooth: hci1: command 0x1009 tx timeout [ 3151.227740] Bluetooth: hci2: command 0x1009 tx timeout 04:09:13 executing program 0: syz_emit_ethernet(0x2276, &(0x7f00000022c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0xb, 0x6, "568463", 0x2240, 0x2f, 0xff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[@hopopts={0x3b, 0x3, [], [@enc_lim={0x4, 0x1, 0x20}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x8d}, @hao={0xc9, 0x10, @mcast2}]}, @hopopts={0x32, 0x1, [], [@pad1, @jumbo={0xc2, 0x4, 0x9}]}, @routing={0xc, 0xe, 0x0, 0xc6, 0x0, [@ipv4={[], [], @empty}, @mcast2, @mcast2, @local, @local, @remote, @loopback]}, @fragment={0x2c, 0x0, 0x4, 0x1, 0x0, 0xb, 0x64}, @srh={0x62, 0x4, 0x4, 0x2, 0x81, 0x50, 0x101, [@remote, @remote]}, @hopopts={0x21, 0x0, [], [@jumbo={0xc2, 0x4, 0xf17}]}, @srh={0x2c, 0x4, 0x4, 0x2, 0x7f, 0x38, 0x8, [@mcast1, @mcast2]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x1000, 0x4001, [0x5], "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"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x5], "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"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x8, 0x5], "afbf5eb51ffc30f6b49fffe6"}, {0x8, 0x88be, 0x3, {{0x8, 0x1, 0x6, 0x1, 0x1, 0x1, 0x0, 0x8d}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x1, {{0xa, 0x2, 0x7, 0x3, 0x1, 0x0, 0x1, 0x7}, 0x2, {0xf4, 0x81, 0x0, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "6759c095c97b7255ec17f1cd9d306cffd65ea6f700fd373d56ad91b951bd1a73571b33cef0e5feecdaafa3ebce544443ded9796fa5d5c1c84d9d639ff978275a20b07c9a500c5c685d43c5ed9c2858c4e0e72e2e77d3aba44972fd46c598d069e3056d428c680dd3181788d6ba3291c7d8f73821057193c8b80dccd8e2f0b97cb274b1097f77031e0c7c31f516f37d40ab1d7328dd52883d49697b268714d40679382fe512b78f46e44d9c1c91aa4b943985619a28642097805ddccd6cf110b05f503560e4da8d02"}}}}}}}, 0x0) 04:09:13 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{0x0}], 0x1}}], 0x2, 0x4010) 04:09:13 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910007000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:09:13 executing program 5: syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@broadcast, @local, @val={@void, {0x8100, 0x6, 0x1, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x10, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xdb, 0x40, 0x4142, 0xff, 0x81}}}}}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x7fffffff, 0x70000, {}, {r1}, 0xbc, 0xffffffffffffff01}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r4, r3) chown(&(0x7f0000000080)='./file0\x00', r2, r3) 04:09:13 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaa2f0327aaaaaa86dd60a4f00800282900fe8000000000000000002b00000000aaff020000000000000000000000000001860090780000000000000000000000000000000284f0da52ef24571313968050378ee824f4dffba7"], 0x0) 04:09:13 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691000a000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3153.991656] validate_nla: 2 callbacks suppressed [ 3153.991667] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3154.009445] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3154.017145] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:09:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 3154.149348] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3154.167422] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3154.178266] Bluetooth: hci0: Frame reassembly failed (-84) [ 3154.183525] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:09:14 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{0x0}], 0x1}}], 0x2, 0x4010) 04:09:14 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = gettid() ptrace(0x10, r0) r1 = getpgrp(r0) ptrace$pokeuser(0x6, r1, 0x3, 0x100) 04:09:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x30) 04:09:14 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691000c000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3154.630493] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3154.653069] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3154.668050] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:09:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:09:14 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000014c0)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f00000015c0)=0xe8) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000001600)={@mcast1, r2}, 0x14) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) 04:09:14 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691000e000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:09:14 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{0x0}], 0x1}}], 0x2, 0x4010) 04:09:15 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691000f000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:09:15 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaa613393e00e7c1fb37b37aaaaaaaa86dd60a4f00800282900fe8000000000000000002b00000000aaff020000200000000000000000000001860090780000000000000000000000026bf0da52ef2457131396"], 0x0) [ 3155.280393] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:09:15 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)}], 0x1}}], 0x2, 0x4010) [ 3156.187761] Bluetooth: hci0: command 0x1003 tx timeout [ 3156.193224] Bluetooth: hci0: sending frame failed (-49) [ 3156.747737] Bluetooth: hci1: command 0x1003 tx timeout [ 3156.753142] Bluetooth: hci1: sending frame failed (-49) [ 3157.387729] Bluetooth: hci2: command 0x1003 tx timeout [ 3157.393212] Bluetooth: hci2: sending frame failed (-49) [ 3158.267729] Bluetooth: hci0: command 0x1001 tx timeout [ 3158.273335] Bluetooth: hci0: sending frame failed (-49) [ 3158.827755] Bluetooth: hci1: command 0x1001 tx timeout [ 3158.833199] Bluetooth: hci1: sending frame failed (-49) [ 3159.467755] Bluetooth: hci2: command 0x1001 tx timeout [ 3159.473163] Bluetooth: hci2: sending frame failed (-49) [ 3160.347775] Bluetooth: hci0: command 0x1009 tx timeout [ 3160.907730] Bluetooth: hci1: command 0x1009 tx timeout [ 3161.548045] Bluetooth: hci2: command 0x1009 tx timeout 04:09:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:09:23 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) syz_emit_ethernet(0xed, &(0x7f0000000240)={@broadcast, @local, @void, {@llc={0x4, {@llc={0xe, 0x7e, "9978", "753dc6fb7a9c22d1485068c93342ee4d3e2ea68d88b4cb81874a8a21338b2c09d480871de127d000964f3a87f83b56a4cbb0a4e97f0e8c2056d7d02f789790fbc6da84cd2c23d679605b4e5147666994d3fb29d046307a45503080332bace98d2185be9dd3c43f519ad08edc871f18707d09331da67d8b2a9e002f24b965ec6bcf528b9145a4934088a2f5ba920e4c8ddda632732797d3bab3617ee7f28de03b4b0f16d68cfe268140683f51932da65888f9b07c02d468f3c2bab3d46d95dbc8db5310689c29b56bd45a8037a1872003319e1bb67b201235496fe0"}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 04:09:23 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910010000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3164.224724] validate_nla: 5 callbacks suppressed [ 3164.224735] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3164.254562] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3164.264693] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3164.268466] Bluetooth: hci0: Frame reassembly failed (-84) 04:09:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$rose(r1, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @null]}, 0x40) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 04:09:24 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)}], 0x1}}], 0x2, 0x4010) 04:09:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) dup2(r1, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:09:25 executing program 0: 04:09:25 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910048000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:09:25 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)}], 0x1}}], 0x2, 0x4010) 04:09:25 executing program 3: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x7, 0x8, 0x4, 0x20, 0x6, {0x0, 0x2710}, {0x2, 0x2, 0x29, 0x0, 0x81, 0x8, "8a3ebeec"}, 0x7, 0x4, @offset=0x6, 0x3, 0x0, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x1c, r1, 0x31905e13403123b7, 0x4070bd2c, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x4040841) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4048040) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x30) 04:09:25 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r1, &(0x7f0000000280)={0x11e}, 0x269) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 3165.513915] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3165.532901] Bluetooth: hci1: Frame reassembly failed (-84) [ 3165.539324] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 3165.559398] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3165.569244] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:09:25 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691004c000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3165.704270] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3165.712843] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3165.720847] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3166.267848] Bluetooth: hci0: command 0x1003 tx timeout [ 3166.273412] Bluetooth: hci0: sending frame failed (-49) [ 3167.557882] Bluetooth: hci1: command 0x1003 tx timeout [ 3167.563303] Bluetooth: hci1: sending frame failed (-49) [ 3167.627756] Bluetooth: hci2: command 0x1003 tx timeout [ 3167.633216] Bluetooth: hci2: sending frame failed (-49) [ 3168.357849] Bluetooth: hci0: command 0x1001 tx timeout [ 3168.363258] Bluetooth: hci0: sending frame failed (-49) [ 3169.627771] Bluetooth: hci1: command 0x1001 tx timeout [ 3169.633263] Bluetooth: hci1: sending frame failed (-49) [ 3169.707794] Bluetooth: hci2: command 0x1001 tx timeout [ 3169.713194] Bluetooth: hci2: sending frame failed (-49) [ 3170.427801] Bluetooth: hci0: command 0x1009 tx timeout [ 3171.707813] Bluetooth: hci1: command 0x1009 tx timeout [ 3171.787807] Bluetooth: hci2: command 0x1009 tx timeout 04:09:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:09:34 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000200)={{0xffffff92}, {0xffffffe0}}) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffdfffffff00800282900fe8000000000000000002b00000000aaff02000000000000b9441dec0000000000000001860090780000000000000000000000000000000284f0da52ef24571313968050378ee824f4dffba700000000000000000000467a8910dbd552c183e3682dba291d0304b424141c14ec2489"], 0x0) 04:09:34 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x1, 0x4010) 04:09:34 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910060000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:09:34 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000000)={0x7a}) syz_emit_ethernet(0x126, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0xf0, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x1, [], {0x2, 0x6, "ea5ceb", 0x4, 0x3c, 0x5, @empty, @ipv4={[], [], @multicast2}, [@hopopts={0x5c, 0x0, [], [@enc_lim={0x4, 0x1, 0x1}]}], "fdad22584397170acf8c46a1a4f6da1de4d2713098dba587d3e5091bc598f10ba81955739a97d690df3868fe8a6fbd9559297a3b1afec71a4b952ff1f41ba7b74a4a6955fdef48da49470e7ce9fdce3673100812ba5372a6719115390823146aaa9493aa7ebe7b88251f4503633a5aa186bc248591621d5fd770a7bccb0fb88e69ce5373835602ff1ed093ec569d7a59ccc918ab63f1f91e3042fb2b9d1633789cd48ef3eb4e86b94d275dec422edd23"}}}}}}}, 0x0) [ 3174.470756] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3174.491687] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3174.501315] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:09:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:09:35 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910068000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:09:35 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x1, 0x4010) 04:09:35 executing program 0: r0 = semget(0x0, 0x1, 0x4) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x1ff}, {0x2, 0x3ff, 0x800}], 0x2, &(0x7f0000000040)) syz_emit_ethernet(0x2c1, &(0x7f0000000280)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28b, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[@hopopts={0x87, 0x17, [], [@hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x21}}, @pad1, @generic={0xfe, 0xa5, "f52005f1c2b04f99f2936e0200603022076e60c56a4bd553cf4ffbd9c82a89412fac493ab73a78dd3dabf2032601212ec2fe182369a2e60f24f039f8b0e2435548d1bced2e42b3059f02c66772255a7f5bf297f0bff8a2476abdebe2cd16c4dcd010cef83035636a1fd80e4da4ff4c681a2f3ad44e48956658661d6214298104202c5cbd85abe5df711b2e915890efb24e54c804a372130c29ca1ccb81cc811e49df63d0dd"}]}, @hopopts={0x2c, 0x0, [], [@pad1]}, @dstopts={0x84, 0x1, [], [@jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x2}]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x2e, "f0b9617d3a16b9ec8e27a59c894b61d80cec5119904f417cda199ac822659c6f973996e13f44e220e10b8e5407ecef92014048571a874f647ef0c3e21d3a8276772c9afd8a3f050e00d0ccebeb60d4381f0c8666a4515082142de8a14125c17e7507d14cf88c7efb01dbbcf87b508bec2aaacada421456bd0a763eeb96297d5872aae0b870d6fc9ad3fefcecbc49a61273bb4744654e95a12cacdf5017ea0dd06fe3a9de0a15d73b82aa717f45bb84024fe3dd5e0396044b42fa060c4dca7fd9c9fcc4db751f593c32e28ec619b66494b9d7cbcea7be3dfe2cd63e12948b113c617771b919d30bda364f8abe04a4d7e50e922fd22abd19fdd33a64055bc5502dca9c5dccb20a736146a017413eaf351f326cbabd85000000000000000000000000000000ae4a421c671ae75409bb52450fa856b601a76fb7073d960e6db5e4d3de1b187c3e9d35d9f07c23493069bfd334412ab4eadb36795b6a2e41e9d6ac8775ea18a20818def6c98b524fb9fa767e1eee3b"}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 04:09:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(r2, 0x5412, &(0x7f00000000c0)=0x6) [ 3175.755818] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3175.778603] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3175.803738] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:09:35 executing program 0: 04:09:35 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691006c000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3175.845601] Bluetooth: hci1: Frame reassembly failed (-84) [ 3175.944170] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3175.959227] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3175.967206] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3176.587768] Bluetooth: hci0: command 0x1003 tx timeout [ 3176.593155] Bluetooth: hci0: sending frame failed (-49) [ 3177.867687] Bluetooth: hci1: command 0x1003 tx timeout [ 3177.873142] Bluetooth: hci1: sending frame failed (-49) [ 3177.947703] Bluetooth: hci2: command 0x1003 tx timeout [ 3177.953167] Bluetooth: hci2: sending frame failed (-49) [ 3178.667752] Bluetooth: hci0: command 0x1001 tx timeout [ 3178.673182] Bluetooth: hci0: sending frame failed (-49) [ 3179.947730] Bluetooth: hci1: command 0x1001 tx timeout [ 3179.953143] Bluetooth: hci1: sending frame failed (-49) [ 3180.037818] Bluetooth: hci2: command 0x1001 tx timeout [ 3180.043295] Bluetooth: hci2: sending frame failed (-49) [ 3180.747764] Bluetooth: hci0: command 0x1009 tx timeout [ 3182.037790] Bluetooth: hci1: command 0x1009 tx timeout [ 3182.107832] Bluetooth: hci2: command 0x1009 tx timeout 04:09:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:09:44 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x1, 0x4010) 04:09:44 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe4, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7bda}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7e000000}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @empty}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0xc804}, 0x4000000) 04:09:44 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910074000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:09:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 3184.714316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17619 comm=syz-executor.0 [ 3184.719108] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3184.737744] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3184.745498] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:09:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:09:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000180), 0x4) syz_emit_ethernet(0x28e, &(0x7f00000006c0)={@dev={[], 0x17}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x258, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[@dstopts={0x0, 0x6, [], [@ra={0x5, 0x2, 0x800}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x7}]}, @routing={0xc, 0x6, 0x1, 0x3, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr="0e3622770d677148b8699832cdf52701"]}, @hopopts={0x62, 0x1d, [], [@jumbo={0xc2, 0x4, 0x61c}, @pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0x40, 0x9, [0x1, 0x7, 0x2, 0xdbbb, 0x1f, 0x7]}}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x58, {0x0, 0x14, 0x9, 0x0, [0x4, 0x86, 0x5, 0x661, 0x1, 0x30, 0x4, 0xe5fb, 0x8, 0x33]}}, @jumbo={0xc2, 0x4, 0x1}, @generic={0xff, 0x45, "8317cd91e60c04a1d5f7ef5cc8853a28b8f46c850a38654dbb20c75f7d5f83508ea5622b81df1c61f8cab30cc13ff35910a953545ec99258ab58969232ca02a41f2c6b9aaf"}]}, @srh={0x5c, 0x10, 0x4, 0x8, 0x3f, 0x10, 0x81, [@ipv4={[], [], @local}, @remote, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0x30}, @mcast1, @mcast2, @mcast2]}, @srh={0x62, 0x6, 0x4, 0x3, 0x7, 0x48, 0x2e0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, @loopback]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) write$P9_RLINK(r5, &(0x7f0000000240)={0x7, 0x47, 0x1}, 0x7) r6 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0xbe, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f0000000440)) r7 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r8 = dup2(r7, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r8, &(0x7f0000000280)={0x11e}, 0x269) ioctl$SG_GET_REQUEST_TABLE(r8, 0x2286, &(0x7f00000002c0)) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000080)) 04:09:45 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a8430691007a000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:09:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:09:45 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x0) 04:09:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2a6581, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x200000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {0x0}, {0xee01}, 0x6, 0xe28}) getpgrp(r4) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) r5 = gettid() ptrace(0x10, r5) r6 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000001c0)) r7 = dup2(r6, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r7, &(0x7f0000000280)={0x11e}, 0x269) perf_event_open(&(0x7f0000000140)={0x62db30c5f2b36b36, 0x70, 0x5, 0xff, 0x4, 0x40, 0x0, 0x6, 0x88882, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x420, 0x5, 0x0, 0x6c1c4552128ff973, 0xfff, 0x7ff, 0x6}, r5, 0x6, r7, 0x0) [ 3186.014691] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:09:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 3186.067845] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3186.095668] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:09:45 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100f0000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:09:45 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000180)={0x8, 0x2, 0x0, 0x40, 0x9, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000006c0)={0x2, 0x1000, "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"}) getpeername$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @dev={[], 0x15}}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffd7ffaaaaaaaaaaaa86dd6007f00800282900fe80000000040000000000000000000186009078000000000000be08000000000000000284f0da52ef24571313968050378ee824f4dffba7"], 0x0) 04:09:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:09:45 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x0) [ 3186.316729] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:09:46 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = add_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="c0712b8f36c052e841bd16db934419ef7377e4cc65caf82bea0bf62211fe4ad879ddeadaf71948a39ba4b08cb8099154be35b2c791b34f5c8107f636fbac90e05c2f174767e330a061f0954774eab3c274be8e5aa4f777df4d22ac3b9c8e846c0723422bd14848480d2676e4145baf8231369150c58755af3f31f0578740a9ace8f4307d3c3af41bd79fd4e43b3a6891294c7a21eca5d8117009db0e78ae114d36915e9c904663466c205c861520efe93cc37888dbaaca9404b83e65a3cc3eb486e3bffb27c30289259365c994d314ea1cba1db4f7523dd1ffa3f6752d021355d80525dbd8c2c0de7bc984dbdecd3a13bbe42211", 0xf4, 0xfffffffffffffffe) add_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="19e9c75cd30eb996a83cc49a4721619509ceff204b2ea292dad111f75883e3b3cb5c4389357c503d728a61cd9b60b07bf10eae6cc6b11ce11ab06d930ee7e511fc93398c988e8958d84e61b420118b4901357962787e4afc9fbec2021a88092f0cb85644eb818c5d70fc65c1d65dfc24e4980f3260ccd159ae5c0125c1f1642335336257ea77a9ad5c9bb9eb615f17d5a9f9223c9fdcf0852c94b36167bc6b2f9bb29122791d4ae382fa7d76f91a7a7a562b87986aaeee173110af1b83fc1f6ad673df26adbeaa712c2f794ad20e524f4ec5288b409155f21c6b1402b4e753241dc89ebc29a32f9aca9d02aa6f", 0xed, r0) [ 3186.372402] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3186.393938] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3188.107759] Bluetooth: hci0: command 0x1003 tx timeout [ 3188.113316] Bluetooth: hci0: sending frame failed (-49) [ 3190.197780] Bluetooth: hci0: command 0x1001 tx timeout [ 3190.203176] Bluetooth: hci0: sending frame failed (-49) [ 3192.267754] Bluetooth: hci0: command 0x1009 tx timeout 04:09:55 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 04:09:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:09:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f00000001c0)={0x3, 0x3}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r8 = dup2(r7, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r8, &(0x7f0000000280)={0x11e}, 0x269) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000240)={0xfe, 0x66, {0x0}, {}, 0x6, 0x4}) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r11 = gettid() ptrace(0x10, r11) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000540)=0xe8) statx(r4, &(0x7f0000000580)='./file0\x00', 0x2100, 0x80, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = gettid() ptrace(0x10, r14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000007300)=0x0) r16 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r17) getgroups(0x2, &(0x7f0000007340)=[0xee01, 0x0]) r19 = openat$uinput(0xffffffffffffff9c, &(0x7f0000007380)='/dev/uinput\x00', 0x2, 0x0) r20 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r20, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r21 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) sendmsg$netlink(r6, &(0x7f0000007440)={&(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000007280)=[{&(0x7f00000002c0)={0x100, 0x3e, 0x1, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x17, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="8ff6b603440c3594ededda8559d8c5c2d758c46c4b848a7044526b67158f0920f7dd1942d1208e3721cd751d4396cc5f", @nested={0xa4, 0x19, 0x0, 0x1, [@typed={0x79, 0x68, 0x0, 0x0, @binary="d6da54a7f06636d55196520484cd809a890e7cb66dc35c30ed771f264ec6901c663774906138539974f3791ec4470fe8dde572815834e815b8dc714091197c4249e6087df5a835b2b9cf9df2fcbd6aa13699eab73105ea3e7ca2cc3f2d0fa01b636dff2316d071e8c4799bb5e52c76a89213a8657a"}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0x8}, @typed={0xe, 0xa, 0x0, 0x0, @str='/dev/ptmx\x00'}, @typed={0xc, 0x91, 0x0, 0x0, @u64=0xffffffffffff6e41}]}, @typed={0x11, 0x96, 0x0, 0x0, @str='/dev/snd/seq\x00'}]}, 0x100}, {&(0x7f00000006c0)={0x2534, 0x23, 0x4, 0x70bd29, 0x25dfdbff, "", [@nested={0x1b7, 0xf, 0x0, 0x1, [@generic="6b4280002e9da90a20d9d9375946344fa0ebee9b159f1e7c4377327da61725d2764509bc349f6d5fc436e23bf41a3081b6f8b9629060ff5d9372a70feae4b2c2eaa7b510b6e0d4707e7c803d222123d0937655062eaa5b1971b4bf8ceae5637827266d8b6bfd704cc699edc459acfe03fe6b05c354369c8d961ef6d0fe0b2ae48a25afc8a7a8a2fa03becd6778ada3ff4e1f262497f4b73da8bca7662c8ddb72c8beedd18e215de788d6e4197a5ca53b3473b2490b6ea4db4db091b7605c7493", @generic="052c2b7aa1ed22188b8dd393ff63e957207801a14abe08d925ec824e47ed171192fd2132e6b3f34f1d26eb189d", @generic, @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@local}, @generic="13957518da610fa4076c3155779bc6b00429a996cc1290f5f831baa1d60b75f0672fec24fad6d7046a9170985ca7f12b7698b3eaa2b26cf9cbd028cf9f895a7cbb91ba55cd4be11de3eb61554bc851f3c7acedcf22a5900db4a20a973e66665fd647b6e7118cd8991601d9f93b27cb88f31fc1b27346261b40de2b9082509a51708991d4d1259c12d464945b3b185ca94cfe8f38c50931774e2fa0cb4617f2c83deb6ca7dd95231a3eff9b14a3944f39ff7eeb0a64a6ce9053d9c2af0f5f"]}, @typed={0xc1, 0x68, 0x0, 0x0, @binary="4a9bf0350c065a14cc47dd0eed452e5cffbb5879ff9e3d4defaa335e666d53947706ea9846002f17905e42aabac441b8de1461bcb9131d63f8501c0cdceae2f3f13e510a68fc12ea56b1f92f03330b5fba017a2e341d84254a8555de497cb99ffcf057a54511615c556f219badc0d66d3220206389da29f801e5a8f49b73a299a3ce29c806616734af922fa513c07e9d1415b60bd2f3f54997da437f69440ee93ee7df5255faece7d56355040a16bc19fecbb26cd54427be2f12377d09"}, @typed={0x8, 0xb, 0x0, 0x0, @pid=r9}, @generic="c2fbd1d66eaac6d014ed3a88a33c19f175a5732c31427c3c73a0fdc246699b75be8509baaa81e1943cce52b657d1407ffb9ea4ca31ca6f585b3ee45d62a8c4b4c495be1d76487d674ecfd132a5e15a6d49f7ff6bcbd02df3c0a455339d3da43fc516420bb021975d806fabb1d6be6aa24958b00d9e579ff8552435e43d987a623a3c0b7a4426317658c013ffb393702ca808ddd86b6fe64b3eb18f768a2bda6d54197146230c5b68f42260db14bd420ce866342b17706405d7d39c1d0d8d2a92", @typed={0x4, 0x1e}, @nested={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0x1c, 0x0, 0x0, @fd}]}, @nested={0x21cd, 0x86, 0x0, 0x1, [@generic="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", @generic="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", @generic="3709d088a35d952a9bcfbe01ef0d4e20c3b62c4dffd00e35d257f36374733d2cc314aee75dca8a840f181bedd6d328a7b3a642a06b6fa87bcb059424b2bf9fb8b44da6107aca7a5da4505c3b85081cde63d2142a421a3c95d86b40afe5ebb7107cbdc4344a071f07db910eecfe87652069ed6ff4cad8c65c017828925bd18003bcf15277d32bde3f3ff7601e362f3da30d25e1d19d9f16b8825b5f176a66fdbc07587b1cbf47b07dcf498c4fe707e014627553e4fd1bc48f72b8c89b6080e46055b27d743dc24d6fbd0d44a4ee8c", @generic="51a4b1106cbb661d66c5f4713a91b74e8b9e8e298f3108a55d18e6c8108161b113a9afb2419e7b1ce272c96fa5770d644261e988b5487fb7c51825181778f0cc0be5a401fb51c730b4a5c7feca4f01c0e47a8dcd0110246e7af3e573eaf2cad17f42bc186af94b6b05b61f", @typed={0x8, 0x18, 0x0, 0x0, @fd=r10}, @generic="4c6591c8ef2792e62fe13dd5d14d2e2d2398c8c5bfa967b1b7f99ae2c5c2ff6fae197b491e924699e73c62db63a142a0be14972e6693fa62c9fd181b2032382b533ba6c89db0af9cce8a8376f2efdedefd33824bec83dca82d0621513a47b10cd99868f2cf6b10a8e6b1d28c06262834c7a0a4c784949cbc8a5a227f4ec927f99430e435a7a9fc2d"]}]}, 0x2534}, {&(0x7f00000003c0)={0x64, 0x2a, 0x10, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x8, 0x77, 0x0, 0x0, @fd=r1}, @typed={0x4, 0x8b}, @nested={0x3f, 0x34, 0x0, 0x1, [@generic="d5dc2b3ef039e85cd2fdf13951abfdfa7bd4c6630f50a9426c15281884cd0f8897b851762939fa32f7abbb061770cc08a2a783e743f326309a019b"]}, @typed={0x8, 0x22, 0x0, 0x0, @pid=r11}]}, 0x64}, {&(0x7f0000002c00)={0x43f4, 0x30, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x1c2, 0x6, 0x0, 0x1, [@generic="fc84ee23039efcfc1a483676a9759f60f881828962ecc21b302582d8752ea3b3ab2e446413f4ef752a723d69c40709e8d77277ab7accf009975cab1a7bd973bdff45b44eb72febb80c919395d61ee68a6e20eb57099d3282da4bde5112432cfcf3f853072bdb1d231aab7c417b2a5a4fca745e50a02145372f3df6971012e0f56ac8913eaae776a1cd2dc44a5e692d3a44c588395a178c6172b26a1c5a80cf9eabc2cce30221bc903d59c94e925fcb665bbd41324642cc02c884971e968dc027bbf933b57ff017887721dc3de7a350124511b1cebf", @generic="d9614b0fadda088137b8b147eea23c5b4dda52f0584268b5eda5", @generic="af15c5cf7e93a7378a89626419607636dc697723a47e3125e7fc2d9bd2bbca2a4b368a9793340f71861061a0d6f936cdbd1bcce0ffd43907afadf2fe1b838ac5f8252c4a23722bf850c8c5cd2b2c6d23348be2c1b9ebe9e4c1eaabeef872fd074776a8117155cfd5ee1749a0977756d7356d00f3c912b246d2d9bd6228fb06640ba9aacfeb6238813022ff49b817038d815e14b80eec87d963d2cf60eb7d0e2ba98b5525308e72afed314082c0b332388cffcf1e10cc2cb1ec76161f9b3eebf105aaef008bdaa0def62807599a2e06"]}, @nested={0x132, 0x29, 0x0, 0x1, [@typed={0xc, 0x40, 0x0, 0x0, @u64=0x100000001}, @generic="504cc991199d9ad7e3cf36098be0dcb360e387cc0ae3412694be95962f1cfc022ce2ed404576762439ad2144afcad09949399553286c2c94238ebd0e38e760b0e320a608b972a0396e4cbc9cb22ca86286abb8982d6b63e548614130fa582d154d76782aba634c74f796b4c6279d", @generic="411f3a5e2d227ee697e630dd1c759b044491f048e7fe45744f10cb2221d94399519d2575a188e1ea8684eca78d0efa5480d41c0c5526408b18fa72c06491cf7e8af670642868604d20d1151539353e166298e7b9c6659096789f616e17bccf6a0ed91afd62df6fdee86a0e72a269c60e29c59b7ccd56cb3946f37cb8eacf27accd1d2a35dbe926df7a6610c9d242f4704cad66563b510d2d98d01d7ccecc59fab2bf7bfb35f71aa7817af9d56fe2fe70f121e196"]}, @generic="53d862633ecf2faa71d7640d04e460681b776549c1b0d1b0b7", @generic="cfe535d4cec007a79226fdf90753c81f7a41f084754dfa1a4a9ee1f992ea1ec4a54efd4fe6114427dd2b1346f6be619ad7fe59fbcd269dd30e722c65c4b98f53097a1332b9eba746c0d28edb252557598455d5ef", @nested={0x4079, 0x8f, 0x0, 0x1, [@typed={0xc, 0x77, 0x0, 0x0, @u64=0x7}, @typed={0x14, 0x57, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x1f, 0x0, 0x0, @uid=r12}, @typed={0x4, 0x8d}, @typed={0x1004, 0x3b, 0x0, 0x0, @binary="bb785086c0852b17bcb54df8afdb518ed8fdec7fc671def4c9eb3f3f6e1b90d1ae075859cad1d04827e7e491bda11637c161e7a960f2acbb36376dc9fa54b482dec9f82cbc6eef4aeb6393002b98fcb2845ef4a1e964a2aad466b25b3d296a400275f7deef8e12a5ed9f034977f90f552aad7b2e25ae04762b445863e3947e030e4754bf18538c6d3485d485209dab98f7371d4708808d31e524769838226ba04b5829e078969497c590c7d01272a2136cba754218fd5f095d94f199cf0e7ff89e47a07d98ab855bdbac450dbd160dc4d0373c077a9baadd7fccf3c23129ece5fcae44c146b0bcf13ace10a3b8ab3b59b2098844da907744b6919339cd89f32018735cf544d5040623f5d99ee9aa4f11258bf6db7c31e954801d026ecac4f18ac316144f18ad2aa4595981b8dfd089a88d7e716732e5ce322896c6cdfccc14b8a1886f116efb6e7a110271b3bd760d9f510676c54ae7a3ca3412420e663b62cef578cf414e4fbbddfbe2944b2b5aa5380d5b70aa9e6b89489d084685c471cf7f38281d6d4f06445dedcc37537d376ce0674c17836a8a2bf07b386934ee3b1510e1b8e7eef8bfb0f385b409ac6d06e27247de7e26da7fea5db740d1b85487c09c2eb758573cabe87dcd02e2eee8b620c41f7b72b3c38f6ae6f6b3ab9e088b3dab98dea9696c3f543930884606f4eb14942bbc80d39c6bd6144abe24e6939f7094494968ee76778b26edee1f71be6df925731f93ddc03d643c549aff29840f497d99ebe657272c8e3761aa68fb7d934b03cb40cbd4c421e9b340ad0261d017a84e9880bbdc69d6127edbdbdf63188fd68dc017f828091ff924c897f0a942690ac817a28d374b76ff6080810af1e9b8c93bcce2f895b32c4484c83b210366bc2b544066b43a7b6eb4b130819a0426daa990e020d17e5ffcc27b955b9532a831b94baa5f79d4f259d516530e3995cdeaee9a6fd659d1539a69855a381046d6d747e4e83fbd6eb5ed25d8fdba8949b164dcea49aae57e05402113c22566c68267ba2e0b743b8b074ffd9f6cca38cb3bb42334e2b526b2e9f970395da7217e29608b60ec559df86931039ca5128f365935b2dd4ebe8c80ecd580e8bbde88ef7f3d66976d149c2c8946983fe899a7bc3f92d41ab4d5f261f2d1090d03546c99246a7948b110021185811323825151ba0c0c705a5720c4956de01ac90f6e14adec0cafef011d0c3dfd0d261d1aa236d954927a2f540d7e096935ca7f7d82efd5b6da438d51e1311042ded19ede4af300d3ef65b9d2b1cde71f4aa1dd48f74e96d03a934a1850313f79ce76d37d060f52a8b5d10b522125c4bb95240928961ca0d030b9e4133e17a8210e786567ef843ba17b10554058e95bd93f36c2e144404dba81e41512671734854a9d0fe0f979e3feef48217b23f7a516323f78d8d5ff260651c504edcaa41e719aedf6ee67548f850bd2d33e6b7c7878548fbbdc76cae4bd19d1e194a716c82bd4524eeb9ecc71a69f018613e0c760bcf32d8ff39338b0487d3e6cf85e3e5ea0470b39964a5b618539fea50431e39e7c5b955ee2a638e4597ca0b9a3c00f3a0df80708b82fe0d31be532230e95facd7a61497ab719ccbbe99e10131a3b65a535f76c2c2ae57e6d6801de0ecd1db6f5322c92124be0abc4177c3efd398d8e36bd32c97cb8275a6725a7c8536211783a5f73f33f6b6eaf52bcb37ee8aedf58713abaf5a48b338706589a6b86c60bd4cad5669340a189f2eaf7cdcf51bbf59365ca8ef066447b4966276312c535e3e5773147c6326a752b2215b83af281f5f7e9ffeb499386116bcd11f5eb34da479cf7b8db1f472efeae2a67ccefbb12fcd931659e2c8d7566c07c489a031b8b79261c094de8147351654fd861ce0dfa4e6bcfb0ba92995a2b5f74646bb121211e102858118069e1b8c984c11099ebfba22a4dd080f73a7072dd911a0c59ef782f41fc108ee0c2e6401f5f10817d9f37abc2841413a132145fd60c4dbdb8c5e90d9d57773e047080967fa2d7e249901ecf2e3b76465014649c9ab8d088d6961efe23fb17d8fcd9ebcdd44673d597c9716e4f754885910de1a14804e436e2d3f62ce9c2a7053a73277b083de19b27bd68f71c16a9a704718b948ac6da5c86a10388ddb3af6b6b385d92121aa0baae2b1566235f46a71b443979c8d4d8e6c48d14a7b9b27f23f47129a3b13bfdcad9fe73f2f0bd0630418736b2394fa578213014fc58b3709c600dd1b6b37bfd2daf1583a3aeab66a75dc90eed34633e20824930f2f48101ef326a6f5a5265c529709fecc63d82c246076fd035474e8f94e3d856771ba3a1603bd3b13b569babecedee978ef86cd163dccb60b3b1c5ff11089080ff0b7f7741a394c64d101e898c2ab123276b3e9e83789abbdbf804dcd6884ec2026eab960ca432ba9d81f43571427a562d3930f31ee0b408cba0ef2ba5f8a65f6c3ccad791004926ad5c31a2f44afd0f5bd21eb913316458a6e8713fbfa9f5da1eed4f423bba4f523658a242195ac02f91bf9be679e82460b7fa37c1690e103c8ea082d339e686b2e8cc848857cf726d6c19f46d75c880a5b1a909d669519f0a47bdc5239971e211299d311d75c9dd25a76122426102a5891a1cdbdf0ff2e5f9681bdff32ddac83e3a104a1b7813043e27dbf36d4a83b97cda28635bb15e4be688bdf65de28d366d7f5faf1b7f4ff5d430a98041ceedb13972b89e36ae077967bdaa01bab977501dc5028926cd1f02deeccebc390adafec025c175893aad4bd03450c44f1fec59528460ba1575c283f1ec4f3f2b8e4715a4982f9b008e60bba9972949bfd4e1c7f4272bb071a8452f5121f050de79c415a8fdb9aaef5bb9330aacb34a5dbe84b2fad849c054894fc8c4095a6495934f1eecedef292a19af78be528dd673e252d3f135fd6d0d59327f7f8c03e8076446c827faedb0bb6a2ac69f562fc0faa7e8f0fbaeef8aa5fd26b997275e666d280afd769bf0788ea417cc65025b118ead9960389b34bd968e3a084b1cc861870e711342070ee830e00627abf7da5b1762bcad5d2d16262e34b0d23dd746c3279f69c4e9a7cf05273db063f12de31a1ca1dbbf67ededb5cce6c48a1c166911a81783863d522940aaa9174ff4d36ed0ab6c744a58128b879ffada99120db6120a578ebd8e9ad3f04ef84e19fb0c8ff0a06662f850fb33da88ee7df749a204faac9ba0427ba5ed2ac27939c52f5da06792810e8a62b91b4236190cdd5b76eb52cdd6593f8ef3dd2597dcd811ca33b4f17039c50abc6ee1249a6d9305a6f78281f554965b9f9125291305ff91ecbc56db7a07ad6d76842c90a505683a217175e8d42b0b4196e31f2f4a4ff201d88576a1a127775d33cf3e3391e864465e259d418a76d1f91832d3f626a59f7796ec9e9b9b6e9423fc0e8b973f00527394c5ec47d0e0e2625e0637ec8f7fd3ba19fb9c6a5d98817bee87d8ec7af01ad50b534f257b1f4765d983c9ccc5becbbdf337f55c3e83e0c1c04e9c45b9bead5576d0c7db1b2f26f1248075e638fd45c022cf0314f4988efc3ced49ef6f9eee2349a48dd0bf8d189c6a089969898f67e4b5f4a3beb424ebbd087e2f14f8e17c18b1fd19da726d7fceb0232ea57de465dc12ab3b3b72ba30acc4eeadf29b5960c9fe1973e080b74f6aa2eb0ae2b3fb283d9dcf414155d61c8a83ca4196d2583551b2dc0d34543f1c566a2f2e1beb5f3973e7d5bbd3a758de061adfa474b89a18b70a33e90b34f146644a23f9694c40612398ebfc1124dc4ac22e16a0e04f58251e039ad5a500e136bc1ee9be46016ac6f1cac385e6eeb9d0dd104e91dce9b6396be1786209926896f816dfff679091bd80d86764ded314807f000e40605a00c616dabb997d6ab09622c8cf36cd25c0e5594d502bdf3dd7dc831e3aa6a41ae8cf839768932ab35e5d77a30bf2712d1f02e0502dbeaa729a4c7f8958be654f4e1983fb1e064cd637aa290f31bfdabd0f3071eb1fcec546e7b7d8e13baacd9f577e77e9c8be45920077be4697defbebe9735bd68e0a1347e2b0a065d5c692d030f272dfa1caedddf618983070f504100b1d64af53439fb663c97e0f86726534f73c94e9d22789aa00986df9f7053b5190ace2ebbf245a45fafb02d32b4793d6df46071b1b6cf166ba38e9545340b3e54fea11db5a7550adad4fad404a7a644c6aa5e86340ac5912f9fa67c0307ddc2cdbb712f0581904310ac5c9c85512914ff5d81ba676a9ef54a50e98b2d4056705f9785d03785734ebffd39230546676cd7834791e3a98fcbf1f3a3b8a56273624eea3e97e34d3f0c335d94bff7cf76d6248f50d33a05339caba002602532584241a0b0dbbf07b45cfb7f96b78ac7679986b65a741b2fbe9f56dd8dc595721e2cae418a047edddb3de20fdb3ac90874e9ad90cbcff635ec9a05f7e1ba8ff3f4f213715a76783607f12c9b420166085ede58c23cf62c92db50c36317aa13d2bf04999d44e40240d9a43daac5d5ba6e9a095b15aabfc5ea0a41294649eeedd0dfa8ffe1ce3d65c5dc2c88245bbb495ea120c1ba09dede88fca8fc903badc6e6565c385dd8cbd1f1453b2f0ff144765a435764493c245d9644df5776e0fedc1be5ed1b0187006a287cdcc9f683daf52b455bf2b187cf7d91e571622bbf17cef9b68e09369ff3da32086b590fc4a891b3210ec5d5a8561e03e6558592ef02afee388ff1fc8cd74987e274e4a39013543b38085eb31e6c9556ee6f566d9c23aae799c397dc5b3f86d9138c1d1f1f61700fb3ccb9a68b009db1891113b98a0be9f02b46e9cba5deabd0ed164edde087467658e9d3bbb10c66dcf37b7bcf3c452d63a43fd16fe0eef308e749cc30e12b54c0acb48c811bd17ff6aa09bba99f3f43aa2d489090d30390771e787c334ca73b46fdd2a8171fb85a14a3ab8e11a762ba99afa1e2a804ff13187452d594813404fd3995d001ac75fe5a9be544a5df80b4ca1f6c623277e826a34a947f17a423b3455943d18b8348c7394ed880489bc91ef069aa4aa3cf3d66d29cb0565cffb3cf654e7d3857bcd3fe9fd3380aff7bd7b06f85feca4704add7be4706f1d23f6453d8f337dd73b6f441e87d3cc5de3ecd53aaab87afd48355e208a5ae5c9f80a17a12446146df7e3ed906a5158fb0c7b4c3e361f2b6f84e6e5dccbdbc7eb87971cb60d64fc64aaedfd3df7d88b6514e15b99ec8aa9a949770141b39feeb1286b70c94fd3ae63bd40c1ea1984e274a0686ad72fd5af606958abf5b248c0986e45847c893cae96c50c9497d1124705deddcab30491153f29d87ee5215c046c0231d6b1977f8741f9e2181fe7937c5fd3ea506b3f1d33314f5beb6c7fec9801a7b99ff5ec37a720ce23dc230f463eac8f681f492ee4935afc8e90e9355d70cebf3d527c0112b544472adc6638b995091fac6aa15c176db01239ec533daf2380c43f231f3c6ea37f67b52442c8dae8de2d10b8049b61e495474211cbeb5372349a923e898f6ae4927a400e7d78a07ca0bb74fab20a05da7e6c35870e171fe1544595977f4e237d85f5e6c724422435f5dbb296003e0c84c5321f867b644523c56649240f197175db9012cc6f27a805c7736319e96589517316b6ad5323db55d36bb7686514fb7018117333c386c38359392de58630f8d968f3b0caa2693600250e53453041a2cdd050f0464e1dd819f730540711f494958650e913a79384578a7289365b3687e644ef665a560c1aa731f49cf441ca7640b450072b4e0a96097377021d8f265966055681"}, @generic="44ebe7ec771f3d3594385b63ac6612dd1c60fc3e3bb9188777711e951291fa8179d08bc4150292cbfeea2058eb10cb622068450e99d97a9cc9d4b5a6b97457fbf02c8145233414208651ad37497d064c9cf76b4e99dd8b564bac1f844197cfd912c09c8fde3bc8edcfd261ac94b14259ec21ef2633bbe3bf34763d0d4e31a206b13b84cfc8946fbe10ee3256c90d71fed28b043e307af74857044717a47bd6624eb8f59f853f6af4fef750ff9f4eae0bf156e3f2ea2c5c8356f0eec17af49b14066aec31baeb4b16475131f9ee0b894263a11d57e4a2f753c612d32d2b76f9f8f2dc606631e6e84f9d9a5c0c9ecdb3157778187e7e790c06c1e49ffc61519ce85142b521213b9990ddd4675138295b40bc1b9c7e6bfe613618ad5743f728c5e6c86dcb3b5c6feb67e263de9e82aa92a13b18c678fbbd2260efdb0d309e2abc5acb40b173f22c33762b5abeeb032a42173942a88358d9795c4a62b7e6f0de8626f80699c766068d9d8f38005c346518931835e0d8fe82bb2fa3f31429867c90706aa5258a8818512b0146422861c0653d98efc41439ac26e9ff1e6cabf746ad2c72cc3d0e440bf8647ede135e3786cf1cf8e63744c202c55fdbc61b9223d4438abd875622fe6ef18ea2dc6c53079dba015e2b7906a330c6db2913c059a2f4d3fda57d8b83e036160e0a7365f608814964af5b427461a1fefac3d05de2cf2227ec425cff497657e200b68b8608336177ab3b9772f7c3ee0ce9802423852a52208b94c42d90130185b11f2b54ebc74fb3386fffc802c342b4dace3dbaeab829dc873e305a91ee3c7273671a2918c7a89e345de9cfd8cd593289f85c36e2d941b58702202f1fa3950f0d95a6c6634c03bca286f444d5807e8e050fadce12ee2ee79164a4faf6da904db91ac34c003951dfb0d8afb3be6402b41bffb6ecfc9cb9bc566a1a35e8494ecdad3aac56b528fd924a24dd1ad7ecd06144109d6355f6065fe2dd9475167f8bef94323c72af43662e30abacad8adee12e2605dfeaba84aaa46b3de3fb429a13efd6ca5b6a8a6614f2a588aabbbbfdd77e6d13518b0a71dee3981da4fac7b4cb96fdf113cffc307e2e1842264fe975d3da38f1a44d01fdce767e1528c92de20f05533ab21e1290b394832cb21b12330b554bc4f3588061c047a515cf65f9e9ac9251752a4959b86b3f530057aed80afb42335707178a696390ef76130af01466e9105e60ad6e0b348272a39e9f9b1e04cb27baede9bd8b11ea85105130a0446ce67169ed4c51bc81cf22aa2a1cf5b3fdf03c9427f4eb2bf6ababf08a23a6eb9779df75bda2ef26dfd0f699129e8dc2c2ab1710f2934794af238b51bda581de796ef17c10f997ba0e9a7817be6d74993abb92884765f82cd3d698d5d03735a22f0d2f6c47084b7be9e83c5b02f835eec1fceef5370661d014416572c5b800c7f63bfd4c27afc29141fbdc7e55e9bdc9792a71c30ca5f3d17408eb9f98484d5867627d155df7549fb7d0d4aa8f2e6c5ea9eb2e67fb0cc00663b13901b736fb48491a60be29ea6101ab25f7015744c69be8a65522d20d197ce05782b0ffa02430ecfcf8bede0f4aece10fcc87e80acedf20506a3482e5d8c12cc01736d02fb29da3b6eb530fd9b10d3e4a5984d854f4e3f846b5ae23d8047a98090e5204bb0b3126705857bd3fbb93c92a0894c063f0ff1d21723baba07b31dc66d216c8324122d1cf41bed655df4b5152a980959225006c7f7d9f4b23e8c5a2a0fe1c11b44705e7f3d556d5489f490c84af48888f9b38574a0ce65843a5053840525790ea4184bb6f379b4ced2f5f625e65438d9da4d0293a4c9aaf7ca6c8f023d870f46c6848b90e5dad36bce95a00a5b3974d23272f868d675cff187bfe43220db8a5d1c97f4d80b68ad28572d5f90939e3bd7333d3c7b72db14a345b40e543429cfb1ef89131e59768f1cf3e97aaf89aa8ffe916f80a24ed9d0be00d19625f24f45016eddde5748a1d5394768c55b0edc952e262bdf2ee7adfac8f3b7254e45f29e9d23da0754abbe0f77c9170baec096601ddc6067459c85f6e48a91f24b9a11b9eb17757e92e80d2e91aacb0b34f0971b5635045eef98a2fa894e1f135d662fbb036d792e6dde96aeb9ce06995c54a2939076845f52488fc4bc07396f5b775396b2f7b33b136c0ca88486a84d52ed965f51dac032fd37f292e9481de83edaf23e80e7b1e3e1ab65d944737b463693b96dd6805a2034c97a4132ee9bd30997a84ce82c5563cb6f9ae654b9465e6807e0fb0dabf8a7c3c75ed91345587165f7bff9cbd3b290ec40455600cc59d3bc1c19885b8e871bca3a9a40de5a1b3a0959832f14d427e5a883a4b94607fc5e9370ab423bc7497c814db8629149bd93d8fb1a5004e2bacd752ada4c90d91e6974be5b76eaf6d2646cb6c8eed11f871c83c9c0906260db2036c18a76fb9348a2ef1408a266c9098a7536302b8c1dbd870ca86daa06800f4fcda4d990859a1203b8f5a3a50a419cfd99b8c0c43f0177873a4184ee544398eb64e7b453b06543dc1fe4b359c5c2e995423726c6a047947eba844a19736407ed27192567f0ddfd3302c6e45b60e0ee89ebbb902807c0dd95461854d4b256dec96d8a36cecb378f541dfe103146aba1ca1499c52f20a50cca539d70efaf25e7bf9b4d8c2dac193b8e67ca2089d418d64645a5eb4d207d5b6c11432b604ed00a17f1950df60f63fa258542de555187cc90cc1e53964105ec2e8f7efaf85ec3cc2177e9ead0b9ce995e377736e193421f2640504f7d9254d7729dae7e1d566409f0cde335d5e2ca8a36a62e59bf31d1e18d7f10a24877dd397ea53e590a0144a760c3271b6972e4e31895d94d8bd0325f3e276b9f92944cbf5059bb9430d8e458f1a947b8389d460d1657c0a192bab4bade77eadea8ee52678f76219eae614b317c7d4f65c8616b42d96f519fa05e87c2e775da03aea61fe15a993281e7c8da0f5c68726a59e60e6a29e9f8bbf55b36b63111ed4ee2c60496dacb6194d328f9d6c536114259a5c8f26fa7f9ecc2ca7f58e4e79de06565ca016a6959f8a171860cc7f1ab7f2fb09bb381ffdaa101f099003ed17be640e49b36f3bd3d8fb681b6fb97f05704a85f87645426606a0894576b8fe8d6c30e26123fff45e770f2b545e30b6685a65049ec38839eb726c99bed8fd42b5824143ffdf48380295d6e8359b78a0113c9e840642bccef407094d15ab138ae8b89aca33088bc03a029426e8b0fd46901a8306bb2a6341eb5227f37bb48b5a862369948245290e0186113f395d4e1a00251da4c370546a38ec405777ac5b6b2ad7ae1e62ef24f81ccfba6205dc7808c4f6a9948b813aa404cd78c3965d799052946995b5d95947b6ed70038e4221b28c6410f4809e0a6bf7ecb6aa6128f28fc6ce7e2914a37ace3f2135036c25c8ffe0cf5d14362fd14314db55992500ff87391c386f08e3109aa54af6368df627dc9083ab17863ef54f1dd7ed66233711031c586255d6c51c7e19750092e8c0706dd74f46f1751a097c96671451b9b9c28b151c2c6cda55849c6ca2775a995f58169395e23882a1389c65e8ebef65ffa83a854ba1afe3c82ab3bea48df58ad7c2922996c337b3c8eb0333a91bc848da14024a87f3a85432543e29cc288d341ac0698ee481963d25b08cf39d792e5e51343f2424ad9a775a5aa84fc98c54a1edb98ddce06edc6c9378828cf58cbd88f8bfefc2be20ed608186d55d48db070825770e0cd61e3df6873ed651d0191b4e3c2a9f6077f3f61bf9956d85e2d3ca5d78efc686235495dd413a70e73a261e809b9d25a01bb9bf134bd9646c3357e2391ac686aedebb9856ab82af26659fa9a1f10746b07eb00b61f4ebac686a097c038f8b731742f3bfe4fcbf9b1ce6a1a788760fe94bdea6a2918cc09f1b217e2db18538dc4308183627137582477cc180eb9d4c6fd5f7a32cecf2dd0b756150065f1f7fadaad0d09a26280b91ba5f2ed26c43d64ffe5978255bb3bd4a7a43d5702678917d5daf8b926bdd6b40b19665e666315d76ebd0278176865db221ca85afcad6f2467cc3a8b3dd34294faf5816a2ffb478a14577aba1e5f854b384211b746d853e4f0a45c5db18c4c37128843b56bb9480fd31766ba0831f953f5c620f53789d562ac57d1cb6666f64cd59c5394a77b9e3199d3441b7850239563fa29d2cfaf8a3621c4ab045414eefdd32e5f6ee3fb3ab191b17737071aff2399d96682eecc2a394aac17331aa6c60e3991f146aa4f51f5241966b07635fcbfebd52ea0ecd5176f0b8a9f2dcd262d0d57b71baa32eb10d71f97b78211a38ad1bcc3db34e771279ddf2800f2a6be242fae262c7743e70229b060c25a65f42a62506bbf21692dcb0ad9f454bee3f652f54b18f958e29e903a79a8a1b66e8f07ad8e228f0ff45be48f00bce08aa23ae23c39b0dbaebae721177911d738b7c08e7e7f43d4ea079c146a13709ae5e6ad0fb885ca0ea644f828889d6feed190d6d03ec3e50126f717bfd0fe1b30ca8c633ac89dcd5916ea4addc7b4f72189311c118b397e61ada383046c0fa0c11ae4bfd84c64bcc5f2524b9e865203c3810c7c7244d260decff14b6c1b8ef395569f8b0864409b7b1b76a1662030c9eb78e2b3fd9e6c56ce972e394bca575962b49499dd0b339e3706aa96a76170b72680627abc63c09d353f4bef537bb50b413cecd9ce8d4806ce7543f7f592a5ba28c701f568eab65ecdfcb03cae43adef9cb0aa31edec30ca8637a8da2c5fb8c45e7dd7a00054b752fbc471462c546afb2c143795d72c154a4a9dc9d922d1de7affbf59d00ba9924ec13190a2e20bb4762b899b48799a246220fbae3501145fab02e0a12271a76cc311011dce0ffe538629059f679aeb482a33678a1cef1e9df0835832f24e6cd5362855c4496f4593ef726f5c73a11c80cad88198fb0d28b37a5adf6a69fb108e76740cdab6308f2abe51751d58a394cd16263a79395b4f32e5adad9898eefe2a6190a2a54c141288028541efe8f0d32acfeb6602cc7ae5adab64eb14b83f30f55d60f6b634dcc9362bbb7a9551788f92100c193a76a0e53d3c325857ec0d5856ae99bd417e21403eccfd436dc803927ca7a5784c1231c25d049012f6a6e1d9b16f6b730cb04927ea57f22b93f4ad580bc30d3ebf822d3bfc228d3db7c27793fff07f221ef176f209df7da66d7dffb9dfbec60528a2dca27c86c0917db5bada05d3839a29694feb08a469e6d6f427bcc0561c03afae088997054c8794a715191dd73a37c36e9befdb8e8b3583152e782da0e4e34cf550e8577b183a2fdaf2205055b4e02dbd6510994e60417c6a1280da9d1cb8f5033eddff098ff25bed877779ce4d1d42391a495a63b02a00d3517ccb83887aed8313c909b99bb65df1643a519c6d9ee917287a866eb6499afcf4a3fdbb4fb34244bb3edcf9acc7f717964ae060effd64a6822fd8c282d1e350404df3c1ca005eb7ae620a1a45dff76b666ff93b3ed3b187dc991bcfc924bcc3a22567e8661609a421c9df10d854a650687de54102492e030dd2374d5f6a07764fbf9ace75c32a04841cbc22a67fabd658a6089dbb8641c6f68a8209477ac36b91fb948c0b3c7445c8f8af67223186d748df1fcc2a8d59cc027384c319741d6bd32a6358750400f6406a6adb3dd5059eceb0c6eee285962ef1155e82f4a382a9651692814153253ec1b4cbac3f0163fe118f43fbae3a8705019254281f2f69e6d8cfa1bd35c73a3157b839edbbe32c5f4036b2f3e", @generic="cc8a7a88c18e83a0f0de5052a1df699f63febf4d14e20b3960d832a61c82a7982d3d5ed3e7eba109abc536106ab6936bfe5b51576702b7ac25e7abf84646f5c62ca26749f6", @generic="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", @generic="906aa249b35c1cae570c8e30866d3759ccaa9c7869fabcb902719c802f3916bc028c4d99ad49fa982df4441dcb58857fa4a4f98accbb4d09010e36342f31e535750781816010c066e6b61968de7eaf57e5cf2bb4c414dbd8c0c95ba63e55604a27c93ece544977876a8cbd4c896210907a067d8f40e5f3c287d6bd964f43714c99055e3b43f0ddb86ac56ac492c7150f56ac3e0161599e7b8c0f5b6cd69ee599ccdf8ec8fc5bd9f0dbcaf7e2e6e40a357cd1b6d18914753a419c45ed7864976a469fb6edfa7e9e8584bea7f3a70c81fe0f86e3f3b95c47f04eae091108ca2ff01d4ab528763d9ebd9e2ed1509b1d94bb0d1e112af254d053504f573240c73d88b6e502247e570d7f1e4c5b66dc2d14d0618385affe27efa97cc9bf69aee886a4ace9f487b73d0e9c8395bd26ff1da3ae73b0df213ba183c1ab84fa68042dfd0055806eadb4143cb83b9ca5a1c218231c8b87ecde4601190b855c79cdddca3ffafc20eec35c1630c36f9833518b083a2da733f05e5129ca0d0718e0b8a0aac9e932e5d29693784962a29b647d07292fba0ae726daa19dccce14441bb82fa8625eb70e0f1d63517d581dd28b661aa12f26a919705a9a80505b2e1010914f586a64187f4c6c4cb9c3c7221cdb09b013c88ae20c963144c5d613300894e6b4e4e6dea558b0e9d88eecf8866029392b000058ce8bcd72cd93cc4b859f39492ff1029c5896fc3f93baeec692f503cf95802b4fe05d015d5b5b7ae61c17c4da969cbffd1cf5bcdbf6e91b0cf2b4cf538c77961ddeab085a6807a4f703d3f46a40a018a9190b7cc14e1a9660038d5d7a8928809f712283374c90f9ec92e34f108cb27ab3862dd09f3b62b07018148c003a15240ba4999957bd19cf32350c18638aa1c43db9f4cd9da84bc2f8014b36ab11262a6d8e2c6f9e52e0814b70d8d094aeec5ea5c28c6986eb6103b3852dacfa37deff472ee3c2d4323f293d217878cabb7bec57f0e8e8c5a41208bbe7ec5d9af460e9e56b950f8d52407b4b9ee0b22b4c215f62904048da21217e41d99bcd27adc9f43c8be459114377097808e1ccffd71099cc375c53cacda783a7157d82202d39267f6d0f67865309f43062d8e37c332deb71ef964bfbdcfae0ffa4c40a6ce7179bcf8400e975373eda69bafcc5d81ebb67b46894d47f9807c54226d5249088d45b25c72a366e161e6de7af5abf9d41c6b136847446028e59101838ed492b3da183db370cddcfc72b0c2d3ad87d3be9c1bad1f599215195ccb553c7f33217812e5038ed9915083f2b0d6e7dfbb43ad80f2680eefcd924b38e98bce7157a92acd208ea2cae6baf88046d890ffffb89c576d9fc681ca61fea620299d655ca03d2f6a8938ae0463aee6e1f0fd3c7a5fd44bd4a1ccb3d2ca2059ca31de7025dba547cdc694ab71be977eef09285f453fccf1028ab4a9a01bd63c1cf274a9347e7a0073743e6a8b7ee4b1e02b2b7250fd278989d3fffba7cb43f17d1174d3ee2938ffcb7ce7d86c78fc0b30e110838aabf50cdf6412734e9c103233660cae435f1d81e14353f3506a11264524be25f1e53818a71b4bbc469ca2905e500ddb22a541e6c15919486d2a25d093f2c2ffdc8dfc8fd9f9fd1f3e7d3b9e237fee10a2b09b37fde987cfdf3895939c3b927bc5e73b799d86a446a5b6423d58b10fbda753d6359ae98a2723426b4ac7b2a9f3626064527868f17fd4ea6123974859e9c00369fe9827d9601746438ba9538a5eeb854a597336288577eee86b067215b0a73b6246e2bd8483adc7e8387e713f6b7960ca6b3219ef6b33e064b7ba175bf31ef8adbcf57568e0d6e33fc8cfff09fc35d03638c5e282bcf6d5b0054d9ea9f15c00332627e09d40e47cef4ba636ff700692eb5ee5f480ec660e9b13ff4e7acd55f58894509812581462c380d9c3f4297e30c0272eb4c929300d349960c67c9647f4c8ca709dec4224abdd31e3647d9c02f5e810add0527e082ae9d3d09e3f13a69aff764cd239fbb681f12934cf2faa7e24ac51a34462c507c8c901e7ce98e4b4ce64813bfa0957ad9718390bd3a6bba77b6031490330ce974c37fc5c5b418e96264a7c803bd9bf4cc15d11e66af5e1cd8e9f759ba7716b7520930ee0d5c2cd8053983f6cf21fb9d60be1a931ee41c0f444cc54aee1ad5225e8f0d1c43ce29704943deae9d4e4d6163c70ab905b175babbb401b4cbbf73342d5995ff25d5456ac730f90b20e909720a5bc92063adb1441304c07c7e494601b04c6b97d84a7255babdab9158a90029afd8d7a1d179dc00d22f68b1f0541c273ea9ee0834e7d2897e841439b5d2f449824cf24c49c48dd837f8e52ae6099940d689d5a5358385bb54be5a39d85b8bef704361ab4f121c9bf9ba7ceda5f458897c6c4349f416d62f99bb68da50747c32f28ff0e26a5e49ad9ece71b9c87b64ff44027668919aed950f962319a525b9de8bd1ccbef2f5b1e0c92a614768d4b082c885f7091c48b989258b69d5f236750a41ab43f4a735198a4cbcd35b60138c57028394a6a41abe924ca7a674e3918c0948133c8846e3054f778e6a643eb54c9b0875007f3fa34d75f05a9d843262c1e79966142b38cbc3febe6cc82d6ea8418760900c3141beb725fb3773ec55c684237f34d352abce0208616071cd304e5d3e30fb54791790abcb8badfec0087f628b5a3b36edf8d4aa308de1117262e1a262a483a0cb36e8d94edc6a5a6333bb17e00fcb4339142d84efea09adba82e721ecd821825692fbe77cf483ff866ecb769fb6b579df8836adba3c9b2e5426e3087c063c26fd4a33c3c9fa2b757b988c9eaebc1821adb06a5a1df490a0001fcd053b8d280fd6a1e32f1b8fc08f2f6a078f19a1db1944fb17f09cd3eba69e1c1f87f297d1cac0dd3680667194d093fbf68e65c8851451e110d5364950bb37a7ef7a01ccc7d9013d5fcd67b41f576e22d9aa18b0da93662f9dbf255fe8b457fb491a14f1c954228864a3c8384263974e6a46a1457b242b155ecefb71c18261062ae9e3b28d501720d43f4b4c400f0e1c7db0c0063bb4592a8d4b667f8c62ca7f7bb48fe5f03a5cc23e3e716186ed315c6b53acbe6ea30379e82dec529de7d8ac7abdc72d7a631c8386833ead969a06648210d1c4b0c353d06ffbbaab5c35f0db8af2b448a4beaec65bc02c3e50d5e3271b2d8bc8f98870c1d80cfac2df555c8432cc753792bd56303626afdb4eca785baabc757eeed45ee8be7f29d50cad3523c3910c85e5240e5bd14789583cc5f61398527a8288b4341e27e31f34e24e980f60f5d2683feda6ebcfa6e4cc6c6a615c60ce06d39986ccf6ee4096921666bf43d25c729ea8e3b0afe926e5b1c8bea68e71535bbf35bdfb57a1eeef850c9dc4abdbc14825d921c845d4f01aa3173565f3933431f7ee1696fb2624b6dab7a54dc36819b83506bbf3fd78033cc11c11942c41634df5fa1b7227853dfdde29b35cd99df2b43ccaa0e4c2300d2823c5893c9f319d3cfb01cc0eeb858fe59f1e63cb54c1c141cc1929dbe37b3a8767a91c3d6f3d154df07f91b782718c4d0e4fc337c5ca7dd20e68c4be589a26e8651c4388189b12db417bcbd184b52511b889094c5f7c9695960045665ad03a73acd4921b009a6247c2fec4ac44098b83248691ebda1b1558b6a985ff68e2f1dd4aaa5de724ad0eb1eb89ec9e1146ec9a756d6d892e619c5b2fe26f28af2609cf562245d1c7d2ecfe4db8ecdec89f85fad05767dac61563eb2c8af59b31d8075f8456a099ba39408ace3a2b02d91a0a3a6b5f4edd546d9500f9d0ef53f6c88ed8d53225c7276d80c993c96cea90bc9e622475740dde475554164a1ca4d6cb4e753f41c102c6203f382f60f6b542902c7eeaa527906788144fca4b19ede32ad1db25af2c80480581c77c817354682fe2ba14ca749cb923cdfa3e2adb53f5c1e2edd4fc811fa218763b40b16c3ea6858679854cf5f002d5634055a4974f5807f4d2a7538f6dcf704d5b455a5415d5568ae5d0e2c46da6f34fabec80ac8b080535cad3fa6ab80607a6dd523f1946d875ddb3bc9f06e119f1224644a8e01dd437f5c8e93fe5c833ead71b4a034058e62f50dfdc0357689458df71e372c647b00f29de37964d7a721890e673e1bf14c315f73c42d2eeaffaaf0ca9cabce016d17fffd7a7d5c0ab3d2374689a809ce642365e21ee3cf1689a84e01f72767a1cd3b7a14f2be21c027e32a2158ad4457445c5bbd382dd066ddd8868641251293b8933aad0961f0b1b249bba0b3de0e2141307e1ac93cafdf0e862beb7cd377470cc6b6ba3d6255fa1de1d70c3f45a9d02d833bfc11788585bbc95ccb306e1962e6eb4aeaa3f0f899421a0125f4121b382d5e7ec94f00b1ee42e91b11a756f36389110ddf28fed1f34abbb403f2a7d372ffc9453441a97312f8284d9b44617fd71e0ff5e42d000271f7d2bcc63c10f7a64d3f948ad51f28c4545ca806e1c8f699a2920a3fdb46e1f5803f6a0a26fa81e0b503c924d65c88228958871468ff8e128f7b4f241e69fb9135c0861f832b75af15cbd197545145eef0cda7ea34a09a84c0d4c06b543330db83b86822ed75e5442bb59b272a692bce218e21dcf9f806f774d4d253f2a2277c0a71e12369e3d530356946e162fe5fc6088b99cb4dc2d33d9dca1e0b7deb892255d682c51803a22052c6ace90194a323de83371870d11fe73ce27a9ff03d88a1f7bfbcefc14fc96d9be9b32985067a0f11d36efdcab5a0f96ada7c312431d8b67e9b0582e9be8c49e6773caf1bd0489d95778b67f6905d12df1df8127409bb7d448f9bf1a66b255a4f76778e48fc5f02af4e06c2208595fd36cc7cbf001e05f5bb69325c6c870a53ff0b40673df78dcc54b52a28c231c33271086066648d081892f3c65c385a83eb99dd467afe0ec81d2047f4fa5a013d52e29518503b42bdc91d9e4f5c8a68b628f7c5d2be2b89a9ca2111bf765a09da60552e438ea09f40c2ffba8c890b05e94328c4489671218d17170b3c7dcf27f542582566c15ebf0903a83fd2136347914760f3bc2cef3cf212ca93e889ec7fb56f5bdceb9f972364db16f8a48fc5b5286433989fb2bdc094568a7e360e04d3d38200c696bc9b85b82c48dd8412dbc8d6f239d8e5356dd410d73c9a86726661058910ad316a0161ca567f6c83cabd90708aa60b0a098af98f6746a15acc6fbfce1c359a611b8f3195a11ca063fae44bbdb34bb595bbcfb20c48eec68ad9a36fea8364fcea79660feac87818c92cc0a5b4b30bb63ca21fe7a00040d08f1acda83191fb8fb1738af080bfffed1e310b51b78a82771ffd7f54170225b5a52125810258caf1f5adf51d8f29f99b1bd670ebfa9f741e4329db38b1ca1b76cee578891868ce77e856f07cc2c2e7ad1abfa944c70b0e39ccbb12949df9d1501a06b40ddc522c215f0060201885db32b6c5ffd1c3e124f7041608b2f1965938c5ae77ccbcad3915ec9254d54caed87b91aff1ea1408fb57b7f9aafb5bb0b7d298c1e5bf0674bc57d46320f6f676adcf5f9e861881685fbd86330eb49598d9b685049bdd87ad6d109afa4713ab7726f3811c0c292d6a05f8c3e621f940a7847bae3ea08535289dc7e6b9fd98687ae3e45964982fa9d10a919bf649aead80400380bfcd1db893d0f3c8b0abdb54e48fdcd22575f2f28118631e0a7fd9f3300df6bf3eb6915eee56ff36201b7559d26b581201a82fd501640b69239582d9e3ef23b3ee18341e6b97d484b7a6d34144bde1d2f7400c64b24604e2e665c899f31adc9"]}]}, 0x43f4}, {&(0x7f0000007100)={0x14c, 0x22, 0x20, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x9a, 0x56, 0x0, 0x1, [@typed={0x6, 0x19, 0x0, 0x0, @str='^\x00'}, @generic="72c6c3e521906b8b3ff03f089f60c1976f667686884c3902319c10a96494c1e3b87dd354b5d2d56639fac818e364ac9c441cb45fcc358cadb7a35f55d0185ffefbb2e20aca55f7bda258975089e79f787876f0182fd548e1e6fa5156a56cfc5adb8ba8e3c0bad6803f52cecd3ce4e503d985e9edb0d53aa3b329b85eaa93", @typed={0x8, 0x80, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x5, 0x0, 0x0, @uid=r13}]}, @typed={0x4, 0x83}, @generic="c14c283713d41d22581d2f1c61dacd4981933e3c4b36119fcba69b637529240dd571391780fbb4a49dcd9de5d59d8acea76a4d400c4c4a2b5aef23a95fb1d3bab46add0540a90ba19e5d92288c778e4e3a8a8e4f3c15c491de21cacd4495165d057f9e8e5473cbe1776617ad1329f182e177a42a1870cf37003f8a675e8a6504ac79add6c1dca84390dfc33b6e5e62e5b84851d647", @typed={0x4, 0x85}]}, 0x14c}, {&(0x7f00000005c0)={0x88, 0x19, 0x400, 0x70bd26, 0x25dfdbff, "", [@nested={0x77, 0x2e, 0x0, 0x1, [@generic="89e4a82b22cf25ac9e50b73bddb9a44ce6dd100ab658d780d824c50c81dea95326ff43b636ef76272839202b6c35001f847da2686809f57c4342576b81966e04f7ea5f73deb833ee9f1fa83370d2f41326771fd23177891795e1b26018abc1a49242eabc1734af70b46be8", @typed={0x8, 0x1c, 0x0, 0x0, @pid=r14}]}]}, 0x88}], 0x6, &(0x7f00000073c0)=[@cred={{0x1c, 0x1, 0x2, {r15, r17, r18}}}, @rights={{0x24, 0x1, 0x1, [r19, r5, r0, r20, r21]}}], 0x48, 0x508a1}, 0x20004000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000100)={0x1ff, 0xc, 0x4, 0x4, 0x1f, {0x0, 0x7530}, {0x5, 0x8, 0xe1, 0x3, 0x9, 0x8, "45cb45d4"}, 0xa9, 0x3, @planes=&(0x7f00000000c0)={0x6, 0x6, @userptr=0xdb1}, 0x7, 0x0, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(r22, 0x4018ae51, &(0x7f0000000180)={0xfffffffffffeffff, 0x2, 0x1}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 04:09:55 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @empty, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:09:55 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100fc000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:09:55 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x0) [ 3196.236916] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3196.276393] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:09:56 executing program 0: syz_emit_ethernet(0x66, &(0x7f00000000c0)={@broadcast, @local, @val={@val={0x9100, 0x1, 0x0, 0x4}, {0x8100, 0x6, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0xfd, 0x0, 0x0, 0xfffffffc, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x401, 0xfffffb0d}, 0xc) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40802, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@buf={0xd, &(0x7f0000000040)="450c9870218beba6bbcdf480ef"}) [ 3196.284966] Bluetooth: hci0: Frame reassembly failed (-84) [ 3196.297008] Bluetooth: hci0: Frame reassembly failed (-84) [ 3196.304585] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:09:56 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) 04:09:56 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100d0010b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:09:56 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 04:09:56 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) [ 3196.453716] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3196.483944] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:09:56 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100f0000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:09:56 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60a4f00800282904fe8000000000000000002b00000000aaff020000000000000000000000000001860090780000000000000000000000000000040284f0da52ef24571313968050378ee8fba7"], 0x0) [ 3196.504262] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:09:56 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) [ 3196.571662] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 3196.604271] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 3196.644475] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 3198.357761] Bluetooth: hci0: command 0x1003 tx timeout [ 3198.364567] Bluetooth: hci0: sending frame failed (-49) [ 3200.427810] Bluetooth: hci0: command 0x1001 tx timeout [ 3200.433202] Bluetooth: hci0: sending frame failed (-49) [ 3202.507756] Bluetooth: hci0: command 0x1009 tx timeout 04:10:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 04:10:06 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910000030b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:10:06 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xecf}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4004004) 04:10:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:10:06 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) 04:10:06 executing program 1: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:10:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:10:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 3206.500396] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3206.527168] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:10:06 executing program 1 (fault-call:5 fault-nth:0): r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:10:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2, &(0x7f0000000280)=[{&(0x7f0000000100)="6542750438263b715a477a123db8dc7a10fc65929222c66b0f72c96a7524e0d705bb8b07ab623cf5d9486a4336076a026e2d057e924c35fe42e1476a54a1eeada81a52b6013a9b3158f45a53400397b80c97e12ee806e89dee0cb5770942ff43de8952cd012ada284e8f27232156a3caf8c06c1a3125b8c90122342407128d6c1538406b8018f264d15f7c6b6448afef678f2877427c73485a3473637ab6f4fbfbf18523ae331324e258e548ef1aa2e6", 0xb0, 0x200}, {&(0x7f00000001c0)="85504e77bce76b5f55afb2569d6d3f8f39d6de533f0455c95015271afb56af019f16d75cb415477985e38ed98db5b3d5e98170e63b1912e91dbdfd8a2948c1e4c4c772fab359e7bcbec3d3acfb77d7ea0ef7d9d103f19858968fa1d7098a7321eee4602468f8abb784ddf30664512d19b28e69d9de7a3d5eb8987b6cd14361be1c360fb5e2aead6ec278f3844ba2ad5e6bacd5d20dede87e11aec866bb8b5056acfb6068296044c11d220dbe5769ca86fc51c2107a648b2f85441fc28219", 0xbe, 0xfffffffffffffffd}], 0x100080, &(0x7f0000000400)={[{@nobarrier='nobarrier'}, {@enospc_debug='enospc_debug'}, {@ref_verify='ref_verify'}, {@check_int_data='check_int_data'}, {@discard='discard'}, {@commit={'commit', 0x3d, 0x3}}, {@discard='discard'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'md5sumkeyring^\'md5sumvmnet1mime_type'}}, {@uid_lt={'uid<', r1}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, ':GPL^%wlan0*}M&user['}}, {@subj_type={'subj_type', 0x3d, '{trustedvboxnet1'}}]}) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60a4f00800282900fe8000e1941803f675a16800000000aaff020000000000000000000040000001860090780000000000000000000000000000000284f0da52ef24571313968050378ee820f4dffba7"], 0x0) [ 3206.553187] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:10:06 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910000050b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3206.686631] FAULT_INJECTION: forcing a failure. [ 3206.686631] name failslab, interval 1, probability 0, space 0, times 0 04:10:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 3206.758895] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3206.767799] CPU: 1 PID: 18311 Comm: syz-executor.1 Not tainted 4.19.101-syzkaller #0 [ 3206.775861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3206.785402] Call Trace: [ 3206.788024] dump_stack+0x197/0x210 [ 3206.789464] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3206.791679] should_fail.cold+0xa/0x1b [ 3206.791702] ? fault_create_debugfs_attr+0x1e0/0x1e0 04:10:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$ppp(0xffffffffffffffff, &(0x7f0000000180)="5ac971859ce2a945b2c4764e0e43f2868656d3b7d5a31ccc8d5d4148ba41701a1d4fef4ade9beb124103c6151e9699270758f4828e637758221e422d15b59849460880a64bc86ee5102ba9d9acfc9d6bd74a63d70d88c17f0e24699eeda3fdfecbedb67e7a62346b3b743fb80840f50e58be0046787678c6335e8bc70c2d2c7d008f543f41ab930bd4421016885de14b148b0b395b41e34bcad185d532f04d8963d40a9cdb995c4e15edb28b822da877e6de5a448a755d7584911c78f74556f29ee68d8fd0959480add868308b56d4acc62c5f07f3a4f6266d8bdb1a7788b60c7003055263aa2fb987dd", 0xea) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0xf) 04:10:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:10:06 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910000060b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3206.791722] ? lock_downgrade+0x880/0x880 [ 3206.791749] __should_failslab+0x121/0x190 [ 3206.791766] should_failslab+0x9/0x14 [ 3206.791781] kmem_cache_alloc_node+0x26c/0x710 [ 3206.791794] ? mark_held_locks+0x100/0x100 [ 3206.791811] ? mark_held_locks+0x100/0x100 [ 3206.801198] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3206.803167] __alloc_skb+0xd5/0x5f0 [ 3206.803188] ? skb_trim+0x190/0x190 [ 3206.803204] ? find_held_lock+0x35/0x130 [ 3206.803221] ? finish_wait+0x18c/0x260 [ 3206.803243] alloc_skb_with_frags+0x93/0x590 [ 3206.803261] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 3206.803276] ? finish_wait+0x18c/0x260 [ 3206.803292] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 3206.803313] sock_alloc_send_pskb+0x72d/0x8a0 [ 3206.803334] ? finish_wait+0x18c/0x260 [ 3206.884052] ? sock_wmalloc+0x120/0x120 [ 3206.888216] ? transmit_skb.isra.0+0x100/0x100 [ 3206.892802] ? finish_wait+0x260/0x260 [ 3206.896692] sock_alloc_send_skb+0x32/0x40 [ 3206.900925] caif_stream_sendmsg+0x570/0x800 [ 3206.905350] ? caif_connect+0x1460/0x1460 [ 3206.909497] ? selinux_socket_sendmsg+0x36/0x40 [ 3206.914160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3206.919766] ? security_socket_sendmsg+0x8d/0xc0 [ 3206.924665] ? caif_connect+0x1460/0x1460 [ 3206.928815] sock_sendmsg+0xd7/0x130 [ 3206.932537] ___sys_sendmsg+0x3e2/0x920 [ 3206.936622] ? copy_msghdr_from_user+0x430/0x430 [ 3206.941558] ? mark_held_locks+0x100/0x100 [ 3206.945797] ? kasan_check_read+0x11/0x20 [ 3206.949983] ? __might_fault+0x12b/0x1e0 [ 3206.954075] ? find_held_lock+0x35/0x130 [ 3206.958178] ? __might_fault+0x12b/0x1e0 [ 3206.962272] __sys_sendmmsg+0x1bf/0x4e0 [ 3206.966307] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3206.970633] ? kasan_check_write+0x14/0x20 [ 3206.974868] ? __sb_end_write+0xd9/0x110 [ 3206.978961] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3206.984494] ? fput+0x128/0x1a0 [ 3206.987766] ? ksys_write+0x1f1/0x2d0 [ 3206.991567] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3206.996311] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3207.001063] ? do_syscall_64+0x26/0x620 [ 3207.005029] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3207.010385] ? do_syscall_64+0x26/0x620 [ 3207.014460] __x64_sys_sendmmsg+0x9d/0x100 [ 3207.018737] do_syscall_64+0xfd/0x620 [ 3207.022541] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3207.027721] RIP: 0033:0x45b399 [ 3207.030904] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3207.049957] RSP: 002b:00007ffa56676c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3207.057836] RAX: ffffffffffffffda RBX: 00007ffa566776d4 RCX: 000000000045b399 [ 3207.065127] RDX: 0000000000000002 RSI: 0000000020006080 RDI: 0000000000000003 [ 3207.072393] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3207.079670] R10: 0000000000004010 R11: 0000000000000246 R12: 0000000000000007 [ 3207.087367] R13: 00000000000008d1 R14: 00000000004ca2ae R15: 0000000000000000 04:10:06 executing program 1 (fault-call:5 fault-nth:1): r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:10:06 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x200000000000a, 0x10101) r1 = socket$inet6(0xa, 0x800, 0x6) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x8}, 0x20) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000001c0)={0x1, 0x9, 0x4, 0x800, 0x0, {0x77359400}, {0x2, 0x2, 0x9, 0xf9, 0x92, 0x1, "2091b4f8"}, 0x8, 0x2, @offset=0x7, 0x1, 0x0, r0}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x4000, 0x0) write$P9_RLCREATE(r4, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x4, 0x4, 0x8}, 0x9}}, 0x18) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x0) [ 3207.209053] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:10:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:10:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 3207.261052] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3207.297909] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3207.373126] FAULT_INJECTION: forcing a failure. [ 3207.373126] name failslab, interval 1, probability 0, space 0, times 0 [ 3207.404110] CPU: 0 PID: 18391 Comm: syz-executor.1 Not tainted 4.19.101-syzkaller #0 [ 3207.412038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3207.421407] Call Trace: [ 3207.424007] dump_stack+0x197/0x210 [ 3207.427650] should_fail.cold+0xa/0x1b [ 3207.431563] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3207.436691] ? lock_downgrade+0x880/0x880 [ 3207.440870] __should_failslab+0x121/0x190 [ 3207.445153] should_failslab+0x9/0x14 [ 3207.448974] kmem_cache_alloc_node_trace+0x274/0x720 [ 3207.454099] ? __alloc_skb+0xd5/0x5f0 [ 3207.458026] __kmalloc_node_track_caller+0x3d/0x80 [ 3207.463210] __kmalloc_reserve.isra.0+0x40/0xf0 [ 3207.468442] __alloc_skb+0x10b/0x5f0 [ 3207.472313] ? skb_trim+0x190/0x190 [ 3207.475973] ? find_held_lock+0x35/0x130 [ 3207.480058] ? finish_wait+0x18c/0x260 [ 3207.483995] alloc_skb_with_frags+0x93/0x590 [ 3207.488791] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 3207.494221] ? finish_wait+0x18c/0x260 [ 3207.498134] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 3207.503444] sock_alloc_send_pskb+0x72d/0x8a0 [ 3207.508120] ? finish_wait+0x18c/0x260 [ 3207.512195] ? sock_wmalloc+0x120/0x120 [ 3207.516377] ? transmit_skb.isra.0+0x100/0x100 [ 3207.520979] ? finish_wait+0x260/0x260 [ 3207.524969] sock_alloc_send_skb+0x32/0x40 [ 3207.529453] caif_stream_sendmsg+0x570/0x800 [ 3207.533883] ? caif_connect+0x1460/0x1460 [ 3207.539086] ? selinux_socket_sendmsg+0x36/0x40 [ 3207.543780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3207.549323] ? security_socket_sendmsg+0x8d/0xc0 [ 3207.554187] ? caif_connect+0x1460/0x1460 [ 3207.558354] sock_sendmsg+0xd7/0x130 [ 3207.562086] ___sys_sendmsg+0x3e2/0x920 [ 3207.566106] ? copy_msghdr_from_user+0x430/0x430 [ 3207.570881] ? mark_held_locks+0x100/0x100 [ 3207.577376] ? kasan_check_read+0x11/0x20 [ 3207.581538] ? __might_fault+0x12b/0x1e0 [ 3207.585714] ? find_held_lock+0x35/0x130 [ 3207.589782] ? __might_fault+0x12b/0x1e0 [ 3207.593853] __sys_sendmmsg+0x1bf/0x4e0 [ 3207.597878] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3207.602236] ? kasan_check_write+0x14/0x20 [ 3207.606493] ? __sb_end_write+0xd9/0x110 [ 3207.610554] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3207.616114] ? fput+0x128/0x1a0 [ 3207.619513] ? ksys_write+0x1f1/0x2d0 [ 3207.623491] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3207.628279] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3207.633141] ? do_syscall_64+0x26/0x620 [ 3207.637370] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3207.642760] ? do_syscall_64+0x26/0x620 [ 3207.646798] __x64_sys_sendmmsg+0x9d/0x100 [ 3207.651137] do_syscall_64+0xfd/0x620 [ 3207.654937] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3207.660154] RIP: 0033:0x45b399 [ 3207.663390] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3207.682523] RSP: 002b:00007ffa56676c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3207.695902] RAX: ffffffffffffffda RBX: 00007ffa566776d4 RCX: 000000000045b399 [ 3207.703200] RDX: 0000000000000002 RSI: 0000000020006080 RDI: 0000000000000003 [ 3207.710474] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 04:10:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:10:07 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910000070b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:10:07 executing program 0: semget$private(0x0, 0x3, 0x441) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60a4f00800282900fe800000000000005726360b8200002b00000000aaff02000090780000000000000000000000000000000284f0da52ef24571313968050378ee824f4dffba7bc5ebed69cd11e755ddd494e84aecdec3a300727545d4ff675c383e425e59483d41a48919570e6b0c048302622d25c4e1879bb59"], 0x0) 04:10:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 3207.717920] R10: 0000000000004010 R11: 0000000000000246 R12: 0000000000000007 [ 3207.725834] R13: 00000000000008d1 R14: 00000000004ca2ae R15: 0000000000000001 04:10:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 3207.847481] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3209.307861] Bluetooth: hci0: command 0x1003 tx timeout [ 3209.313402] Bluetooth: hci0: sending frame failed (-49) [ 3211.387841] Bluetooth: hci0: command 0x1001 tx timeout [ 3211.393253] Bluetooth: hci0: sending frame failed (-49) [ 3213.467758] Bluetooth: hci0: command 0x1009 tx timeout 04:10:17 executing program 0: 04:10:17 executing program 1 (fault-call:5 fault-nth:2): r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:10:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:10:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100d4080b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:10:17 executing program 3: getpgrp(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x24000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2d) 04:10:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:10:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:10:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:10:17 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="7df700d3f20ef3c9927406f600000000a62600100000005ad374448dd8fe715eae8d9f75c5e9fe7cae"], 0x14}}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x40, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4c3}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6f92}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008884) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @dev={0xfe, 0x80, [], 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 3217.396718] validate_nla: 2 callbacks suppressed [ 3217.396730] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:10:17 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3217.487979] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3217.535459] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3217.552609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=18468 comm=syz-executor.0 04:10:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:10:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100000a0b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:10:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:10:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x747200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x1a) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f00000000c0)={0x7, 0x7, 0x4}, &(0x7f0000000100)=0x28) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x30) timerfd_create(0x1, 0x0) 04:10:17 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3217.622465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=18468 comm=syz-executor.0 04:10:17 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r1) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='user.syz\x00') syz_emit_ethernet(0x253, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "11bd7d", 0x21d, 0x21, 0xf5, @loopback, @remote, {[@hopopts={0x62, 0x8, [], [@enc_lim={0x4, 0x1, 0x4}, @pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0x5, 0x5, [0xfffffffffffff635, 0x32, 0xb24f, 0x64, 0x7f, 0xff]}}]}, @routing={0x3, 0x4, 0x1, 0x4, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}, @hopopts={0x2e, 0x0, [], [@enc_lim={0x4, 0x1, 0x96}, @enc_lim={0x4, 0x1, 0xd4}]}, @routing={0x2b, 0x4, 0x1, 0x3, 0x0, [@mcast2, @ipv4={[], [], @remote}]}, @routing={0x0, 0xe, 0x0, 0x1f, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, @mcast1, @dev={0xfe, 0x80, [], 0x2e}, @local, @empty, @dev={0xfe, 0x80, [], 0x43}]}], "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"}}}}}, 0x0) 04:10:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 3217.815103] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3217.825971] Bluetooth: hci0: Frame reassembly failed (-84) [ 3217.832431] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3217.853080] Bluetooth: hci0: Frame reassembly failed (-84) [ 3217.872355] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:10:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:10:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100000c0b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:10:17 executing program 0: socket$nl_crypto(0x10, 0x3, 0x15) syz_emit_ethernet(0x176, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x140, 0x29, 0x0, @remote, @empty, {[@hopopts={0x3b, 0x20, [], [@calipso={0x7, 0x40, {0x3, 0xe, 0xfe, 0x1, [0x8001, 0x9, 0x7, 0x7, 0x10000, 0x3ff, 0x1e]}}, @generic={0x3, 0xb7, "25dde2b515b323bfd1aa68d9c066960d3658707391491b8c8efdecd4064db4a7ea6c58b0e162beac987adc4812630bb2f500dfb9c215a6b486dcd02c3d4f7b5572f99a33788be5ca2fa92bbe173190713d43001682cb8e2f8d4306f095e933d667015d03466ea3b72c01c436dcd8c59c96dacb52f31e79790c4da162d179f32f463dc9958ee6c3fed7dd344e3ca3f57db927abcedf2e0979529184ea4dd872ee3ea23a3fb3687714b832699304fd152a3c242d26112f73"}, @jumbo={0xc2, 0x4, 0x6}, @ra={0x5, 0x2, 0xff}]}, @fragment={0x21, 0x0, 0x4, 0x0, 0x0, 0x5, 0x64}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, [{0x22}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:10:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:10:17 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x4, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3218.067310] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3218.100326] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:10:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:10:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 3218.123370] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:10:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100000e0b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3218.339848] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3219.867810] Bluetooth: hci0: command 0x1003 tx timeout [ 3219.874430] Bluetooth: hci0: sending frame failed (-49) [ 3221.947786] Bluetooth: hci0: command 0x1001 tx timeout [ 3221.953552] Bluetooth: hci0: sending frame failed (-49) [ 3224.027736] Bluetooth: hci0: command 0x1009 tx timeout 04:10:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:10:27 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x40, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$BLKRRPART(r3, 0x125f, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="04005700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000002c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000380)={r5, 0x4c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x8, @local, 0x6}, @in={0x2, 0x4e20}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @rand_addr=0xd8}]}, &(0x7f00000003c0)=0x10) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSBRK(r3, 0x5427) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60a4f00800282900fe6600000000000000002b00000000aaff020000000000000000000001000001860090780000000000000000000000000000000284f0da52ef24571313968050378ee824f4dffba7"], 0x0) 04:10:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:10:27 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x11, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:10:27 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100000f0b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:10:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x13) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0xd, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e20, 0x4, @loopback, 0x2}}}, 0x84) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) [ 3228.245236] validate_nla: 2 callbacks suppressed [ 3228.245247] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:10:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:10:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 3228.351688] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:10:28 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0xc0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3228.409231] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:10:28 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910000200b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:10:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x40, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000100)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000140)={0x7f, 0x4, 0x400, 0x0, 0x1}) 04:10:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:10:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 3228.625163] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:10:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 3228.738471] Unknown ioctl -1072143860 [ 3228.746207] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:10:28 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x1100, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3228.784637] Bluetooth: hci0: Frame reassembly failed (-84) [ 3228.794642] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 3228.798156] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:10:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 04:10:28 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100003f0b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:10:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:10:28 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffeaf8ffaaaaaaaaaaaa86dd60a4f200002829000000000000000000000f1aeee4ac563b2afe615243e931ded543860090780000000000000000000000000000000284f0da52ef24571313968050378ee824f4dffba7"], 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(r0, 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt(r3, 0x8001, 0x8000, &(0x7f0000000380)="0485b24a8e2d4eae481293c21454451422f11dbf19dacf5f17bb17a384afccc27334d8da647e66ce5ad558d031d907c60a44514337932283ceea12d37272b512b9b5b437c846892a19ac60696a1cc3ba0fa050af0d0877578c2820841ebf819756dcbe7d1868", 0x66) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x80000000}}, 0x80, 0x4, 0x7, 0x2, 0x7fff}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={r4, 0x8, 0x6cf, 0x401}, &(0x7f0000000300)=0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x9, 0x3}, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x0, 0x8}, &(0x7f00000008c0), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=0x10001}}, 0x10) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000480)={0x80000000, 0x5, 0x4, 0x400000, 0x5f43ac9c, {0x77359400}, {0x2, 0x8, 0x7f, 0xc1, 0x5, 0x80, "1186ead8"}, 0x1, 0x0, @fd, 0xffffff7f, 0x0, r7}) ioctl$BLKSECTGET(r8, 0x1267, &(0x7f0000000600)) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="850000005300000095000000000000445a0708d1303274df9696513dcf76656b8ba4549a791dba3e4233542f67a07e7255df2fa25dc49432457ddde8ec5afff74287d7b8e902ab041da7cbfb0fefd473038d958723088900cdc2ffcc604a94dbf6fd2cd61b0dfc2cbe6880df8b5d0e00e07ea49e083963cedf928cc8cbae6903bb9adc8847cb065d8fa0a5014641"], 0x0, 0x0, 0x2e, &(0x7f0000000500)=""/46, 0x41100, 0x9, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x10, 0x3}, 0x10, r6, r5}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x78, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r6}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r6, 0x4) write$P9_RLINK(r1, &(0x7f0000000280)={0x11e}, 0x269) r9 = accept4$unix(r1, 0x0, &(0x7f0000000080), 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f00000000c0)={0x0, 'veth1_virt_wifi\x00', {}, 0x4}) 04:10:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 3229.017344] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3229.051137] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3229.059572] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:10:28 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x3ec0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:10:28 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910000400b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3229.083478] Bluetooth: hci1: Frame reassembly failed (-84) [ 3229.091926] Bluetooth: hci1: Frame reassembly failed (-84) [ 3229.234896] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3230.837761] Bluetooth: hci0: command 0x1003 tx timeout [ 3230.843350] Bluetooth: hci0: sending frame failed (-49) [ 3231.147815] Bluetooth: hci1: command 0x1003 tx timeout [ 3231.153281] Bluetooth: hci1: sending frame failed (-49) [ 3232.907729] Bluetooth: hci0: command 0x1001 tx timeout [ 3232.913452] Bluetooth: hci0: sending frame failed (-49) [ 3233.227855] Bluetooth: hci1: command 0x1001 tx timeout [ 3233.233251] Bluetooth: hci1: sending frame failed (-49) [ 3234.987735] Bluetooth: hci0: command 0x1009 tx timeout [ 3235.307720] Bluetooth: hci1: command 0x1009 tx timeout 04:10:38 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="efffffff01feaaaac334aaaa86dd60a4f008800000aaff02000000000000000000000a000041860090780000000000000000000000000000000284f0da52ef0104a7000000001700000000000000"], 0x0) r0 = gettid() ptrace(0x10, r0) r1 = gettid() ptrace(0x10, r1) r2 = gettid() ptrace(0x10, r2) r3 = syz_open_procfs(r0, &(0x7f0000000380)='net\x00') getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f00000000c0)=""/36, &(0x7f0000000100)=0x24) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x22000, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000140)) 04:10:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) 04:10:38 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910000480b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:10:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.advise\x00', &(0x7f00000002c0)=""/213, 0xd5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x10000, 0x0, 0x0, 'queue0\x00', 0x1}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f00000000c0)={0x3b, @empty, 0x4e24, 0x3, 'lblc\x00', 0x12, 0x0, 0x1}, 0x2c) 04:10:38 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x3f00, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3239.109021] validate_nla: 2 callbacks suppressed [ 3239.109033] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3239.139473] Bluetooth: hci0: Frame reassembly failed (-84) [ 3239.147887] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:10:38 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60a4f00800282900fe8000000000000000002b00000000aaff0200000000000000000000000000018600907800000000000000000000000284f0da52ef24571313968050378ee824f4dffba700000000"], 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r1, &(0x7f0000000280)={0x11e}, 0x269) ioctl$FBIOBLANK(r1, 0x4611, 0x4) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000080)) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r3, &(0x7f0000000280)={0x11e}, 0x269) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r3, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x4}, 0x0, 0x0, &(0x7f0000000300)={0x5, 0xc, 0x0, 0x3f}, &(0x7f0000000340)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x5}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r1, 0x10, &(0x7f00000004c0)={&(0x7f0000000180)=""/165, 0xa5, r4}}, 0x10) 04:10:38 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100004c0b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3239.166352] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3239.195314] Bluetooth: hci2: Frame reassembly failed (-84) [ 3239.276272] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3239.288790] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3239.302607] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:10:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:10:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x1, 0x3}, 0x20) syz_emit_ethernet(0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60991c9f00e55d30ec80000000000000000000000000000000000c0000a550378ee824f4dffba7", @ANYRES32, @ANYRES16], 0x0) 04:10:39 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0xc000, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:10:39 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910065580b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:10:39 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 3239.770035] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3239.790063] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3239.806306] Bluetooth: hci1: Frame reassembly failed (-84) [ 3239.807196] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3239.820496] Bluetooth: hci1: Frame reassembly failed (-84) 04:10:39 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910000600b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3239.955958] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3241.147817] Bluetooth: hci0: command 0x1003 tx timeout [ 3241.153666] Bluetooth: hci0: sending frame failed (-49) [ 3241.227686] Bluetooth: hci2: command 0x1003 tx timeout [ 3241.233206] Bluetooth: hci2: sending frame failed (-49) [ 3241.867791] Bluetooth: hci1: command 0x1003 tx timeout [ 3241.873334] Bluetooth: hci1: sending frame failed (-49) [ 3243.227823] Bluetooth: hci0: command 0x1001 tx timeout [ 3243.233937] Bluetooth: hci0: sending frame failed (-49) [ 3243.307803] Bluetooth: hci2: command 0x1001 tx timeout [ 3243.315647] Bluetooth: hci2: sending frame failed (-49) [ 3243.947795] Bluetooth: hci1: command 0x1001 tx timeout [ 3243.953248] Bluetooth: hci1: sending frame failed (-49) [ 3245.317897] Bluetooth: hci0: command 0x1009 tx timeout [ 3245.387752] Bluetooth: hci2: command 0x1009 tx timeout [ 3246.027817] Bluetooth: hci1: command 0x1009 tx timeout 04:10:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x3) 04:10:49 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x10080, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f00000000c0)) 04:10:49 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0xc03e, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:10:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) 04:10:49 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910058650b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3249.374419] validate_nla: 2 callbacks suppressed [ 3249.374430] netlink: 'syz-executor.4': attribute type 15 has an invalid length. 04:10:49 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x400, 0x201000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}}, 0x20000000) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x5382, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000240)=""/114) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) [ 3249.422080] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3249.438583] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3249.453206] Bluetooth: hci2: sending frame failed (-49) 04:10:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 04:10:49 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910000680b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:10:49 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd70a4f00800282900fe8000000000080000000000000000ffeb00000000000001860090780000000000000000000000000000000284f0da52ef24571313968050378ee824f4dffba7159ef83dd3c25fcfd6ee6e17ef81d9f66a44054407fecfc6eec2835b8343d4db3be8ee5e11d564f9b8df31ece92d1614abd35bd60d03239051f06a14758bb90bd23b3766d77b16d5452f895fd532f4b1298635745ad1917f3533995e70d37afd40ffba4775091a0c82c0ce5213b30443"], 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x6) r1 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x9, 0x4000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0), &(0x7f0000000400)=[0x0], 0x3, 0x0, 0x4}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080)) 04:10:49 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x34000, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) [ 3250.007214] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3250.025893] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3250.035579] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3250.038039] Bluetooth: hci1: Frame reassembly failed (-84) 04:10:49 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x230040, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000300)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x1, 0x6, 0x4, {0xc, @win={{0x1, 0x7a33, 0x3, 0x7ff}, 0x1, 0x9, &(0x7f0000000140)={{0x3000, 0x8, 0x80000000, 0x6}, &(0x7f0000000100)={{0x7fff, 0xff, 0x7, 0x8}, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0x10000}}}}, 0x6, &(0x7f0000000180)="b50d605f942437bd344f11780a47dfb6c685e1e29e89a703611332c15d00805532e18ca03d364fafa15a5de4200e40972abd30b64c5e6564d7483d65db86be75d02662c253341ce4e2726a0e35150db0235b47a4e49f2015c44a493873b871048095679f288a4f8c713c7f77155484d288ecb42f9d86a9b472eaa511b432", 0xf7}}, 0x400}) [ 3250.046848] Bluetooth: hci1: Frame reassembly failed (-84) 04:10:49 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100006c0b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3250.188144] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3250.196027] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3250.205319] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3251.467758] Bluetooth: hci2: command 0x1003 tx timeout [ 3251.473224] Bluetooth: hci2: sending frame failed (-49) [ 3251.478744] Bluetooth: hci0: command 0x1003 tx timeout [ 3251.484137] Bluetooth: hci0: sending frame failed (-49) [ 3252.117729] Bluetooth: hci1: command 0x1003 tx timeout [ 3252.123222] Bluetooth: hci1: sending frame failed (-49) [ 3253.547729] Bluetooth: hci2: command 0x1001 tx timeout [ 3253.547753] Bluetooth: hci0: command 0x1001 tx timeout [ 3253.553202] Bluetooth: hci2: sending frame failed (-49) [ 3253.564127] Bluetooth: hci0: sending frame failed (-49) [ 3254.187765] Bluetooth: hci1: command 0x1001 tx timeout [ 3254.193309] Bluetooth: hci1: sending frame failed (-49) [ 3255.627755] Bluetooth: hci0: command 0x1009 tx timeout [ 3255.633205] Bluetooth: hci2: command 0x1009 tx timeout [ 3256.277807] Bluetooth: hci1: command 0x1009 tx timeout 04:10:59 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x40000, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:10:59 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "020008", 0x28, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x2, "84f0da52ef24571313968050378ee824f4dffba7"}]}}}}}}, 0x0) 04:10:59 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910000740b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:10:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) 04:10:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8000, 0x0) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x80000200) inotify_rm_watch(r2, r3) r4 = getpgid(0xffffffffffffffff) syz_open_procfs$namespace(r4, &(0x7f0000000b00)='ns/net\x00') r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x604020, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) r6 = syz_open_dev$media(&(0x7f0000000380)='/dev/media#\x00', 0x5, 0x10000) r7 = gettid() ptrace(0x10, r7) mq_notify(r6, &(0x7f0000000ac0)={0x0, 0x2c, 0x2, @tid=r7}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000600)={"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"}) r9 = syz_open_dev$sndseq(&(0x7f0000000b80)='/dev/snd/seq\x00', 0x0, 0x121ac1) r10 = dup2(r9, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r10, &(0x7f0000000280)={0x11e}, 0x269) syz_kvm_setup_cpu$x86(r10, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="64f30f09f2470f1bdab9800000c00f3235000400000f30b8010000000f01c166b82a008ee866ba410066b8fdff66ef0f78750366b8d9008ec8410f06c4627d78550d", 0x42}], 0x1, 0x8, &(0x7f0000000240)=[@flags={0x3, 0x100}], 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7fff, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3f}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0x3}, {0x0, 0x0, 0x0, [], 0x28}]}}) uname(&(0x7f0000000a00)=""/173) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r11, 0x400455c8, 0x4) ioctl$TIOCSETD(r11, 0x5412, &(0x7f0000000000)=0x30) [ 3259.625156] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3259.659073] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 04:10:59 executing program 0: [ 3259.678618] Bluetooth: hci0: Frame reassembly failed (-84) [ 3259.691481] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3259.700483] Bluetooth: hci2: Frame reassembly failed (-84) 04:10:59 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100007a0b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:10:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 04:10:59 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x400300, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:10:59 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa134f60a4f00800286900fe8000000000000000002b00000000aaff02000000ee6eb6043432352d00723f0f22f7910000000000000000000001860000000000000000000284f0da52ef24571313968050378ee824f4dffba7000000000000000000"], 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r4, &(0x7f0000000280)={0x11e}, 0x269) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0xd, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={r5, 0x8}, &(0x7f0000000040)=0x8) 04:11:00 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000001380)=ANY=[@ANYBLOB="ffffffffffffaaaaf060d3dfd7ab7ef11b55aaaaaa00fe8000000000000000002b00000000aaff0200000000000000000000190200018600907800000000000000000000001f4780503780e824f4dffba7cca056971a2d1717817fcf57570a0000c0ebffa09d474f59c15a00"/120], 0x0) r0 = socket(0x22, 0x803, 0xfd) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000140), &(0x7f00000012c0)=0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x11e}, 0x269) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000001340)={{0x200, 0x7fffffff}, 0x61}, 0x10) sendmsg$kcm(r0, &(0x7f0000001280)={&(0x7f0000000080)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(ccm-aes-ce)\x00'}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="5ff0bfb460aa837f0cf2bc9b86e0350e41dd", 0x12}, {&(0x7f0000000140)}, {&(0x7f0000000180)="3c842442afef2b8a00cbe44576f3ffac2029e2b22a578cf03fe6b5ef1e5ef1deb24850e5cad4005dd0a9a9d68a25155c1d706bdc14463d39eb451c3a7bdf8e9b90fb6cfa497509d55f660a8fa6225fecac085b0eedb932f31ec61f24ad624737c619913f907a68b4e4db72c0dc8d356066be3130e402", 0x76}], 0x3, &(0x7f0000000240)=[{0x30, 0x8d, 0x6, "142b0fb7f062b2abc22eca352450c6918de66792ed780c1980e181d6d2"}, {0x1010, 0x84, 0x5, "d9884785f06661c90db3460a673b215f75de5862cb19c5eb8e72fabfef7711d9479d2184062d01f0b5ae5e8376dfcb8063e8fe29cd64d08caaba20860e3ff3c7b224fb682ec55db17b39b6d9438683058747118b76ab3c0339bb634b6a15a5a1a169e041a63ba4139cb6ed204a7e8aa89202d314256f4a90df6c6ccae89c3bf083d0cc1a636d67d156fda9d2a2f7e7357ee9098f0085f4c853515784d16036acc68b884fe12350936b9c2f2d0246679479fad93b0c6da46ede04b2941d47661fcab83e786c94310f7580eb28faf8bdd5b202cdc9f9dfadab37df841b67515a744a5072c083c2273fdba7a4860b9a0eb9981dead3535a5733f25feed3a34f00fb5f3757acc8c6923e5fc1c168715a0ff3ab07420d6d84b842201a75d73e9630313075da54ad111a996ff903f08493085617f4265527a4090c84dfff37d6c19431c490b86af1e8f1605ee2c0c4756c942a24474b72c559e7c70c5cd6ac4ecbc7ed836791ee884630165e0fa6d303094bdf74129b538fa67312070c78341f9ddff11afecc82aa28c61ed5a3c97ce2518b3babd2e32c0b2321c87cda7cb5c45e926e16b3f74a6c49f0731619c89408f6a3e59bf116881bc568c6876a495057e4f891eb06ea1821c15cc3cdd0e365dc6e2d30f3ca150f22156bbc358add099966d4d21bef3cb90e161a298bc57b1517d34ba3e95325d2268d52cd613a93508e66a9fb73cb10099a727f05963996b4ec348f9076c7ec3c883a866ecb94222727a28bf4f5b9f4f360851c5f431278809e998db09f6a7b175b19e738ae9a09bae0e646b31945bf5b7a786b9b9a6b4792254ecdaeb1a5118f3d766d222f0e33ae82193f6db36bcd3cd92723f47b53673de7702b3dcbdbc95d074d32bf8859cf954b15e2937d9597a181919728c16590ef14ea1e42d9192799e77ab470d8f529d7bcd6183e60a63a12f168d49d0133b3c03c48631ab6273f6ef6a84c2a2e796533aaae97444f7b33bcc3c0d9057d748a93cee18c8b94be1a10886b523c30399acb02185eb101bfe4797c89e6c1b9de5c8000819c52bb247f3d3e02de6d7ae24a4d764d80122f72a307f57721bd6a91689596f5fb23f64c061c773ee15d0a49cdb3fc52535948b54058d1ba4afbefb6bd1d1fe5773df7c282eed20e31543fc82ee0d1f90ed701122afeda8258c2df52201455ee9fded0031912b5d2ab5dfa883eeae1254a2de50852da55cfb5cde4f176a409910ceb75f6793ac0926a430ef12ba5d317a25bb3a52f766f22e6a1b98b4a5329536bfa87a3ebbf468a9d1c08c19d66b0a91be2d292831982d9db135399ba9f4450013d85ac19006cd830e0f9d7df018c0435e6814815c7b426bfab39d54d693cf58d0c57eacfc36337d3e012f6a9aa31add3a7896141c5384e8a28dff9b67c1d8d540983e5ebf09c9e51639b359421de93f0b206b36feb862e76f586437753431a331b0345fabfcd5e3ea827b3e1bf798f87e629e16528ded401ae2eedaeaa22298347235ec4626d3c767f86cdbf5783f4b7932c337c9004ed37bc1abbde46b41d9cf82b26e5518c2c50bafd72a3af7bffea12a9e00db38535d74297903d2b1e71b6c0f5d145da14db3e806106199e47948502a469e9dac0ddf1ad558771ca3f61c842c52ebd8b90565a943bc2462a396f06844047fe6637b12537874f53c2b57e58cc88e321c08ff0fb0a2186473db984beb5a952e8f2288fccab346015c672b74101c24ba51d15e7e64704096b987e1f880aa2ee8c5054fa609546a2e5be9450efadc0b0fb2840edbf621d09d1725236cbb4b0bdf8dd58703b52964ef6d16942ada6da46216594d258a56feb762101db5f83973701be7fa663bb1db247b0a1061a1ca544f1ed94301031e8c8b9b0c380da850708d841eb54fd2f5ee34dc0d9204773b7ac70ba93e35ab19f65085494342fcc6acf2edac9adeaba4c650739a57622e05fb0fd84f16693e28b6544397e72caff76352a16955ed72e371f243983bfd17cc42757bbe8f1323176846843c34d38c954f02d980de8193ae75cd69c19d94ed688595ab438e30f20c0c63a35e8ffac3ed5dabd779044bde0fc982b51cec67033ab238da98492d2db9d5f05e8de1412f4a7f2c2143ffc889fd34f5c94ebe91910ae8eadd2dbf2166856e4089667af32c13f43c97d011b0112fcd8a916c354735160c9be64b68851342a755082d59f292feff00ed68c547d927abc54b3178ee7b66d66fa64f5538775b1c75c795d74ada37de6092a3c1e58f02b9e44d63e178a5d6af3f974df3cb89965f2052b53c9d24e262698f7e90ad9e0f516b84b6fc7503312658efb380756116e2d2581c92c5c4bc2c4d8db58f315c1cf3910666302b9ee5e3a9898520bde5efbf777a82d3a52feb041b85ca91fae4cec54ca1c60604664ef3941b9c45da217ac8a0c529b03ecf8b7960cdfe91025a6b0fdf258a69ec0a10f1ab5d253cfc51fe7153672e554c8149c94fd4e87754028630f294449a656d723647d526b9a91c4611a7a9604f26e5957acf4e48401299eb8aaa6bd15bf7cbba56104596dfd2622994416639b81091da449bbe6f4833486953f3cc23917a1eb7b940d24bd729c829be555d3d2a09989a4fab74e5f55e8ce189785f0c94c216d54780f4918fb8176f9fc11970d09cc3a1b62d051e51b8f4ee85bc46f6e0170ad94478c2cc942af48cc6b37ba26ce4be76a13230ea29cc273c3b6dec687e348018fb3b26d0c6825fd8989ead3e73e87c0f7367c84ed503b3c4248b750c875ad0aaa21fb4b4003d14db1f5a95f51902cb0331e140a67ae18ee7cb4c4b1c8bde44ca9b41afe467df2b00bf43670ca709e36d73a304b312bfdfc3e0b4fba32b6d18d3bf450e540b9a7b6adcb52ec92826fabc751fc8b3b84d4782138b6937053c8f7b3b1612dc89321e964f2df8fbdc1fd519663d8949e2bde22bbc495e5290bb4b44032f33f79c65ed1e59b281ad74c0c48de3ea94d2046116fd1f87a40bdecb1481752cc924076bd3fb2202eeda0fc0e60b11ef61065190d7d4fa313d5eb815b2d03dac787da3650bac438de990f97305f9da31e188047d52905211f4f490d84b94d657818612a11743a202f3b3a3587c6e898ddee8b6559509cce6028eb719bf2b3f0aa5bc1a5e9a02f47740a199bc3d4304218e5551ae4c6636a401826a1c33e15c11a4d12bdc0871ca1358dde2508a610828f73f25b3ec2e91b5b9a73845ffc7170d283560f8af8f3b6b37df484b481cef451f904ee05930b78e7b34cd9e65fe5090ac1e8de9b80022d8a52975c4b7f8dc0914b3ded39d2e7564a862d7d630d6c4c352c64634ac538f1377a39f11f51493d807ab5b9efc2e00fdf71c12e242fad5b9014e7b20a728a4b8e7e322b4508f40b3650936a1476e959de44ac1db7b3c2b578630e8b3ca7c16506ae56f59e0077bec1bb0a0ebce5f900fb17b0b082abf4abc7db8a1cca710e5af5f1efe29729b304b3d86e4af82a0cc011f9885ca2dc3ff7e2f6e90cdc534cad656d31b8acb75584428f7751f3d1fcf3b7e20b8a48581cbc6fe2270562b1329b2467e772882e5239d0bce9d431833dfa68bd712727985ac2ef9cdc1759c84cd3ef42d8fb445632edf4bfd3924ccc41ab067bf2a28f5ea2c93f92fcd63bb789b4d738437989197dfa14727001cd1835c7df530f7ca8f434a8bed7c8309e44c71ec715f7ccb43b489d976757616089d088ab69300a7e5b469923c0335c6f9c8d32fc72f431d9eb81a9e6cc99bb2a2cab41dffed1fb23f8ba5639ffe4b5547968c9e89c05aa6f4d179b4a168eecaef76b564b2fb90ba9de326afe3a8269dfa280211bd263bcf861ea9df8e8219c8c9c69899bb2dda12aae7b8097f44e2c89aa4a3aadb1f596bd54fa3508480ff78a2bf65f8251ee8de5af921d0c1cc6c80bb70ada8dc67a3ce9e6fb3ad5f029fc2e67d351ea6d756b2bd693cb5131e6fb496ba36d36a2f2f9ed0f3138b07a013567f596acfbdab373eef847dd49b664bd327c14b6b52017b576c0a1baaf95ace19c9e22cacdfeda07b79fdb9847262f3088eaba6b54bd781822b976c41cb03307f3876022b83a9956c825ab1a20ee77e25a533f8405a0eee58c4c4f979228ae39f07a1475e5494bda90bff58b6bcfaa353c2d5a3593765b1d7bb1b84ca176ec1d873bd0b24f161a69b8db994dc7ae79d9b1e7e9a2d08421d95df21cb2e5b3f4712bbfb26093dc0187eca5bc7ab2df9a2c0f17e7f807cdde23a91fbab2d12b5f63a27303297e5acfad4a7f09729816d44b9e4b91fd0ed9468c8d5c6e53d8162a83ad04b805f23d76fde8dd91c316600df36d3dc1c843da500c95dedb47a3c07cdf25552bb566beff95d52c07132e9a87dd88b4a2fc192d925f2b437d896dc007588f2f70cb99c1aa5f0e927d109dd69a0e92cf3a4631b47062360ad8ab5430fb60b4c6e52328c6e4a0b07d7c6660f8c78ccf3f5b4f649036deadfa12a0daf480c3ae9cfe46fff7437d442f168f298ffeeaf1792febae29c2d5f40eb90afddcd0784e71f43988a3f20411af5a772369a78a624e5997c846e2cea4007831b41f0fda62826f950b018f9f34a38c40731810630eb8f2aed3880dda736d4fa3474c9ac458ba58c7f7d9c9011c6475f3b1b5e0b4dc0a3cecc684043efa611a54882703824309a2dc2dc7e5f06bc0c76c8e5b7f0a262e26d4d855fa6e5ed27b89ab38fc9a8fd7c65c7a207b7bbb105e723cf1ec068a7090d9665c55bce9cf610f5c3d9111097f14254d08bb780fbe6189a5348812109909fd9113fd94460acd5200c6d3c976652124b4a7209b39c9d52add3b2c44cc58331bc61bbfd1b0e1b52de0622e2f8265eb5729180424d7f4d85b563fb1b340c352b46617adb93de5eac525d6709b891343fce988307a75cfa601302d0d596209dc49f601bb15bd8874762857709a12c27111d2619daaf3501b981f2b016a2da1067535f9e61cec843a1f68225200de232ed8f71f629e9a69f9bb72f282d7f2b2f0eb3e52f645b3d5b0176a9ed268efacbd8c02e0eebd1994afe1030200b56a2cac73614ea042e38872ac2082ccabcad88fbab1d9dde7141a4d2e6846640cb177cfce2a5844259b75c32f9e9b558e798d9a0e3336099f3bf342fa263089305d9b7c22ff949548d57e123aa0d0b73617c89ffb3b0811e572d7cde3b20dba4106382d64ff04b4b57a151179ea591a529af80d9adac5b094feb7f5e4c76840b7e324610585bc782f68547d451c5e9741e2b08eec751177bb4cbaf5879cc0e4026ac35a75b15aeb66854d7bfb322c8ec21f472c0510dba16c933aeed46ff0e340d96e11d5a209404aa506f1f58da0efaf062ce8066d78772b4b031364ae660c437a0d0edc02baf457ad5473f797436ad148e7ec788e315708f40d4cd480112934b6494485d3e4ae92be92c6630013dd6337dac1b874f1eed5e56fc8e6c530e6db64bd866342bfb4515563be947a030abdc6093fc6a7f45a608a116974e47e4f3199b67a6093387403015647cb2129b2cc39ff78a9e9e48400089ceba09520dadd653e9c785136766fb7ed60791bafa74a18cd94a7857a806fc6d8874d6bd75fa4c22ad174f62f819a645fc65121597a4936f74aaf0d413488edc9de2379a571a8dbecae200073a5bdc6190cf64e70895b678ce80e1cd2f524305a7858365e715b1a5262f220cfad514e4867cf379d1f65a5c5c63beea62d173f7d6247353f53307258e14e1d1a32b41035c9393b1f029657be0af865323469275355a424a49cccda2530e37a4a47159069"}], 0x1040}, 0x28000000) r3 = gettid() ptrace(0x10, r3) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001300)={0x8, 0x8, {r3}, {0xee01}, 0x7f, 0xf4}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r4) [ 3260.244403] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3260.263947] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3260.285679] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 04:11:00 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a843069100fe800b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:11:00 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000006080)=[{{0x0, 0x1000000, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001800)=' ', 0x1}], 0x1}}], 0x2, 0x4010) 04:11:00 executing program 0 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 04:11:00 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f0512fe01b2a4a280930a06000000a84306910000810b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 3260.405158] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3260.416855] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3260.426262] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3260.485844] FAULT_INJECTION: forcing a failure. [ 3260.485844] name failslab, interval 1, probability 0, space 0, times 0 [ 3260.509471] CPU: 0 PID: 20215 Comm: syz-executor.0 Not tainted 4.19.101-syzkaller #0 [ 3260.517405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3260.526764] Call Trace: [ 3260.529356] dump_stack+0x197/0x210 [ 3260.532991] should_fail.cold+0xa/0x1b [ 3260.536888] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3260.541999] ? __lock_acquire+0x6ee/0x49c0 [ 3260.546259] ? __lock_acquire+0x6ee/0x49c0 [ 3260.550520] __should_failslab+0x121/0x190 [ 3260.554770] should_failslab+0x9/0x14 [ 3260.554787] kmem_cache_alloc_node+0x56/0x710 [ 3260.554804] ? mark_held_locks+0x100/0x100 [ 3260.554831] __alloc_skb+0xd5/0x5f0 [ 3260.554853] ? skb_trim+0x190/0x190 [ 3260.574763] ? ldsem_wake+0x40/0x40 [ 3260.578435] bcsp_recv+0x925/0x1430 [ 3260.582100] hci_uart_tty_receive+0x225/0x530 [ 3260.586696] ? hci_uart_write_work+0x710/0x710 [ 3260.591277] tty_ioctl+0xe91/0x1510 [ 3260.594907] ? tty_vhangup+0x30/0x30 [ 3260.598630] ? mark_held_locks+0x100/0x100 [ 3260.602942] ? proc_cwd_link+0x170/0x1d0 [ 3260.607123] ? __fget+0x340/0x540 [ 3260.610575] ? __might_sleep+0x95/0x190 [ 3260.614548] ? tty_vhangup+0x30/0x30 [ 3260.618280] do_vfs_ioctl+0xd5f/0x1380 [ 3260.622188] ? selinux_file_ioctl+0x46c/0x5d0 [ 3260.626794] ? selinux_file_ioctl+0x125/0x5d0 [ 3260.631316] ? ioctl_preallocate+0x210/0x210 [ 3260.635822] ? selinux_file_mprotect+0x620/0x620 [ 3260.640606] ? iterate_fd+0x360/0x360 [ 3260.644417] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3260.649950] ? fput+0x128/0x1a0 [ 3260.653231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3260.658792] ? security_file_ioctl+0x8d/0xc0 [ 3260.663222] ksys_ioctl+0xab/0xd0 [ 3260.666727] __x64_sys_ioctl+0x73/0xb0 [ 3260.670633] do_syscall_64+0xfd/0x620 [ 3260.674431] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3260.679625] RIP: 0033:0x45b399 [ 3260.682834] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3260.701748] RSP: 002b:00007f2c3ef7dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3260.709465] RAX: ffffffffffffffda RBX: 00007f2c3ef7e6d4 RCX: 000000000045b399 [ 3260.716730] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 3260.724049] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3260.731413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3260.738682] R13: 000000000000057e R14: 00000000004c6c95 R15: 0000000000000000 [ 3260.747579] kasan: CONFIG_KASAN_INLINE enabled [ 3260.749404] Bluetooth: Can't allocate mem for new packet [ 3260.753170] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 3260.753198] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 3260.753210] CPU: 1 PID: 9051 Comm: kworker/u4:5 Not tainted 4.19.101-syzkaller #0 [ 3260.753217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3260.753237] Workqueue: events_unbound flush_to_ldisc [ 3260.753256] RIP: 0010:skb_put+0x35/0x1e0 [ 3260.753268] Code: 89 f5 41 54 49 89 fc 53 4d 8d b4 24 c8 00 00 00 48 83 ec 08 e8 3c 1e ac fb 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 58 [ 3260.753276] RSP: 0018:ffff88805139fb30 EFLAGS: 00010202 [ 3260.753285] RAX: dffffc0000000000 RBX: ffff888080236280 RCX: ffffffff853ff2f2 [ 3260.753292] RDX: 0000000000000019 RSI: ffffffff85beed24 RDI: 0000000000000000 [ 3260.753298] RBP: ffff88805139fb60 R08: ffff88809af74040 R09: ffffed1015d24733 [ 3260.753305] R10: ffffed1015d24732 R11: ffff8880ae923993 R12: 0000000000000000 [ 3260.753312] R13: 0000000000000001 R14: 00000000000000c8 R15: 0000000000000000 [ 3260.753326] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 3260.772022] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 3260.772350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3260.880858] CR2: 0000000020006080 CR3: 000000009fc1e000 CR4: 00000000001426e0 [ 3260.888124] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3260.895390] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3260.902751] Call Trace: [ 3260.905390] ? __lock_is_held+0xb6/0x140 [ 3260.909474] bcsp_recv+0xa0c/0x1430 [ 3260.913094] hci_uart_tty_receive+0x225/0x530 [ 3260.917600] ? hci_uart_write_work+0x710/0x710 [ 3260.922190] tty_ldisc_receive_buf+0x15f/0x1c0 [ 3260.926767] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3260.932298] tty_port_default_receive_buf+0x7d/0xb0 [ 3260.937304] flush_to_ldisc+0x222/0x390 [ 3260.941277] process_one_work+0x989/0x1750 [ 3260.945511] ? pwq_dec_nr_in_flight+0x320/0x320 [ 3260.950177] ? lock_acquire+0x16f/0x3f0 [ 3260.954251] ? kasan_check_write+0x14/0x20 [ 3260.958472] ? do_raw_spin_lock+0xd7/0x250 [ 3260.962728] worker_thread+0x98/0xe40 [ 3260.966540] ? trace_hardirqs_on+0x67/0x220 [ 3260.970868] kthread+0x354/0x420 [ 3260.974234] ? process_one_work+0x1750/0x1750 [ 3260.978860] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 3260.984417] ret_from_fork+0x24/0x30 [ 3260.988141] Modules linked in: [ 3260.992000] ---[ end trace 5c65c80c39c590f5 ]--- [ 3260.996784] RIP: 0010:skb_put+0x35/0x1e0 [ 3261.001016] Code: 89 f5 41 54 49 89 fc 53 4d 8d b4 24 c8 00 00 00 48 83 ec 08 e8 3c 1e ac fb 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 58 [ 3261.020001] RSP: 0018:ffff88805139fb30 EFLAGS: 00010202 [ 3261.025410] RAX: dffffc0000000000 RBX: ffff888080236280 RCX: ffffffff853ff2f2 [ 3261.033598] RDX: 0000000000000019 RSI: ffffffff85beed24 RDI: 0000000000000000 [ 3261.041474] RBP: ffff88805139fb60 R08: ffff88809af74040 R09: ffffed1015d24733 [ 3261.049132] R10: ffffed1015d24732 R11: ffff8880ae923993 R12: 0000000000000000 [ 3261.056646] R13: 0000000000000001 R14: 00000000000000c8 R15: 0000000000000000 [ 3261.064432] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 3261.072967] caif:caif_disconnect_client(): nothing to disconnect [ 3261.073064] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3261.086918] CR2: 0000000001dbd000 CR3: 0000000094800000 CR4: 00000000001426f0 [ 3261.094895] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3261.102516] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3261.109994] Kernel panic - not syncing: Fatal exception [ 3261.116711] Kernel Offset: disabled [ 3261.120350] Rebooting in 86400 seconds..