[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 56.318273][ T26] audit: type=1800 audit(1568484711.919:25): pid=8483 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 56.363287][ T26] audit: type=1800 audit(1568484711.919:26): pid=8483 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 56.398433][ T26] audit: type=1800 audit(1568484711.919:27): pid=8483 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.226' (ECDSA) to the list of known hosts. 2019/09/14 18:12:02 fuzzer started 2019/09/14 18:12:04 dialing manager at 10.128.0.26:41177 2019/09/14 18:12:04 syscalls: 2487 2019/09/14 18:12:04 code coverage: enabled 2019/09/14 18:12:04 comparison tracing: enabled 2019/09/14 18:12:04 extra coverage: extra coverage is not supported by the kernel 2019/09/14 18:12:04 setuid sandbox: enabled 2019/09/14 18:12:04 namespace sandbox: enabled 2019/09/14 18:12:04 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/14 18:12:04 fault injection: enabled 2019/09/14 18:12:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/14 18:12:04 net packet injection: enabled 2019/09/14 18:12:04 net device setup: enabled 18:14:41 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '#! '}]}, 0xf) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:14:42 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x208200) ioctl$TIOCSBRK(r0, 0x5427) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) pipe(&(0x7f0000001600)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) open(0x0, 0x0, 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syzkaller login: [ 226.614708][ T8651] IPVS: ftp: loaded support on port[0] = 21 [ 226.682505][ T8653] IPVS: ftp: loaded support on port[0] = 21 18:14:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) [ 226.770303][ T8651] chnl_net:caif_netlink_parms(): no params data found [ 226.912311][ T8653] chnl_net:caif_netlink_parms(): no params data found [ 226.931571][ T8651] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.939968][ T8651] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.948195][ T8651] device bridge_slave_0 entered promiscuous mode [ 226.974788][ T8651] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.982083][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.990421][ T8651] device bridge_slave_1 entered promiscuous mode [ 226.992186][ T8657] IPVS: ftp: loaded support on port[0] = 21 [ 227.036286][ T8651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.045846][ T8653] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.052915][ T8653] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.061546][ T8653] device bridge_slave_0 entered promiscuous mode [ 227.071855][ T8653] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.079075][ T8653] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.087097][ T8653] device bridge_slave_1 entered promiscuous mode [ 227.095714][ T8651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 18:14:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}]}) r1 = socket$inet6(0xa, 0x3, 0x3c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) write$binfmt_script(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xfdef) sendmmsg$inet(r1, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2908, 0x0, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4000000000c) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="1f0000000203193b000007000000068100023b05090002000000403902aef5", 0x1f}], 0x1) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r3, &(0x7f0000000180), 0x12) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80100004}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x440c4}, 0x881) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x50, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2886a27c}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'ip6gre0\x00', 0x375}) [ 227.142963][ T8653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.155693][ T8651] team0: Port device team_slave_0 added [ 227.179595][ T8653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.194391][ T8651] team0: Port device team_slave_1 added [ 227.306714][ T8651] device hsr_slave_0 entered promiscuous mode [ 227.343784][ T8651] device hsr_slave_1 entered promiscuous mode 18:14:43 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070") recvmmsg(r0, &(0x7f0000005300)=[{{&(0x7f00000001c0)=@rc, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000005500)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) [ 227.398961][ T8653] team0: Port device team_slave_0 added [ 227.417596][ T8653] team0: Port device team_slave_1 added [ 227.525780][ T8659] IPVS: ftp: loaded support on port[0] = 21 [ 227.553995][ T8651] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.561241][ T8651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.569116][ T8651] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.576578][ T8651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.590111][ T8657] chnl_net:caif_netlink_parms(): no params data found 18:14:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setfsuid(0xffffffffffffffff) [ 227.697113][ T8653] device hsr_slave_0 entered promiscuous mode [ 227.773569][ T8653] device hsr_slave_1 entered promiscuous mode [ 227.823853][ T8653] debugfs: Directory 'hsr0' with parent '/' already present! [ 227.844871][ T8663] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.853037][ T8663] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.902008][ T8665] IPVS: ftp: loaded support on port[0] = 21 [ 227.910145][ T8662] IPVS: ftp: loaded support on port[0] = 21 [ 227.975087][ T8657] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.982459][ T8657] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.990628][ T8657] device bridge_slave_0 entered promiscuous mode [ 228.000076][ T8657] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.007237][ T8657] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.015189][ T8657] device bridge_slave_1 entered promiscuous mode [ 228.041513][ T8657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.054254][ T8651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.076059][ T8657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.116700][ T8657] team0: Port device team_slave_0 added [ 228.124882][ T8657] team0: Port device team_slave_1 added [ 228.195170][ T8657] device hsr_slave_0 entered promiscuous mode [ 228.253586][ T8657] device hsr_slave_1 entered promiscuous mode [ 228.333391][ T8657] debugfs: Directory 'hsr0' with parent '/' already present! [ 228.378547][ T8651] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.397006][ T8663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.406030][ T8663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.424456][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.433908][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.442373][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.449478][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.482229][ T8662] chnl_net:caif_netlink_parms(): no params data found [ 228.500819][ T8663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.511345][ T8663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.520793][ T8663] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.528682][ T8663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.536714][ T8663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.548186][ T8653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.608568][ T8663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.619183][ T8663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.627979][ T8663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.642862][ T8651] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.653668][ T8651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.665674][ T8659] chnl_net:caif_netlink_parms(): no params data found [ 228.694901][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.703169][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.712975][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.721488][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.730291][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.739007][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.747740][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.756205][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.779965][ T8653] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.800677][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.809071][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.830855][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.838493][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.847421][ T8662] device bridge_slave_0 entered promiscuous mode [ 228.859542][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.867147][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.875529][ T8662] device bridge_slave_1 entered promiscuous mode [ 228.901627][ T8665] chnl_net:caif_netlink_parms(): no params data found [ 228.911717][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.920754][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.929890][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.937168][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.948480][ T8662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.959853][ T8662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.986384][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.995892][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.004982][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.013688][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.020860][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.038674][ T8663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.052683][ T8651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.069223][ T8659] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.078488][ T8659] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.088493][ T8659] device bridge_slave_0 entered promiscuous mode [ 229.102654][ T8659] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.111224][ T8659] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.120079][ T8659] device bridge_slave_1 entered promiscuous mode [ 229.149792][ T8662] team0: Port device team_slave_0 added [ 229.158531][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.168756][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.180462][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.196013][ T8659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.219962][ T8662] team0: Port device team_slave_1 added [ 229.229322][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.245028][ T8659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.276089][ T8659] team0: Port device team_slave_0 added [ 229.284929][ T8659] team0: Port device team_slave_1 added [ 229.306706][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 18:14:44 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '#! '}]}, 0xf) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 229.322082][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 18:14:45 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '#! '}]}, 0xf) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 229.360790][ T8665] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.369961][ T8665] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.384256][ T8665] device bridge_slave_0 entered promiscuous mode [ 229.394593][ T8657] 8021q: adding VLAN 0 to HW filter on device bond0 18:14:45 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '#! '}]}, 0xf) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 229.447448][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.457806][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.468938][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.479233][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.489550][ T8653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 18:14:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) perf_event_open(&(0x7f000001d000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff7efd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffd515, "5c0bac302773a1fa024a2f9d63c82821b33b8563a843e258108472804e31c17ebe5ddaf5b19fb8c11056c674cc8b831e0a2881e02bb81614ff1df220323012", 0x25}, 0x60) accept4$unix(r1, &(0x7f0000000180), &(0x7f0000000200)=0x6e, 0x81800) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/112, 0x70}, {&(0x7f00000002c0)=""/182, 0xb6}], 0x2, 0x0, 0xfffffe5f}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x400c00, 0x0) [ 229.498287][ T8665] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.506720][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.515269][ T8665] device bridge_slave_1 entered promiscuous mode [ 229.530426][ T8657] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.587302][ T8662] device hsr_slave_0 entered promiscuous mode [ 229.633702][ T8662] device hsr_slave_1 entered promiscuous mode [ 229.674011][ T8662] debugfs: Directory 'hsr0' with parent '/' already present! [ 229.716416][ T8659] device hsr_slave_0 entered promiscuous mode [ 229.755163][ T8659] device hsr_slave_1 entered promiscuous mode [ 229.793712][ T8659] debugfs: Directory 'hsr0' with parent '/' already present! [ 229.809347][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.817736][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.844960][ T8665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 18:14:45 executing program 0: getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000e40)=ANY=[@ANYRES32=0x0, @ANYBLOB="383ff3b9d50d317495d66c15c4e2b2fc2c91ada0b86e3804e18d8915a6e856cb4428000000e9f823653796dc08a8941ca40b74239ce12a48aca09f9b14d51f8525f06405c4d3f418decf4d64a7b3e886fdb1ef7ac9695c855ce3f044bf02954961b7d2fcbbf3a8b7e0e4fa0c087e2857cdb689d83978157c0e5c936a5b0500000000000000e5ff75cb8d57c81d04f8da8370fdd1aa101d27aa2065451ab15aa81be4a9e18c4ee7c70fc55ad605d52a13b81383d393c1ff7f0000000000009e0464ee4b25ac48580400ff7f000020430d613f9d95740f0e59f651b5b29e4a7aaa33edb0f9e567afeac8d1f272cdbb72b2a9751400dbcbe90fe38ee5d1f4eb256b7725a59d8dd0bd725903870dde3691de239c94d40d8429405acb3612ca404a5239ec3e83ab0bfaa6395794c80b5e77"], &(0x7f0000000400)=0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x0, 0x0, 0x0, 0x80000000000000, 0xa5}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x5) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080), 0x4) r1 = getpgrp(0x0) setpriority(0x0, r1, 0xffff) fcntl$lock(r0, 0x25, &(0x7f0000000140)={0x2, 0x3, 0x1, 0x1f}) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) [ 229.887687][ T8665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.931065][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.947302][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.957065][ T8667] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.964499][ T8667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.972508][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.981924][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.990336][ T8667] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.997477][ T8667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.005707][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.024605][ C0] hrtimer: interrupt took 27021 ns 18:14:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x200, 0x410001) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000100)=0x8) [ 230.057138][ T8653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.080552][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.089782][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.098884][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.119500][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.145118][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.155220][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 18:14:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x2, 0x4000) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000300)=[{{r1, r2/1000+30000}, 0x11, 0xffffffffffff7fff, 0xec}, {{0x77359400}, 0x0, 0x0, 0x401}, {{}, 0x12, 0x800, 0x5}, {{}, 0x15, 0x7fff, 0x9}, {{0x0, 0x2710}, 0x15, 0x6, 0x2}, {{r3, r4/1000+10000}, 0xe6c1377077df5064, 0xffffffffffffffff}], 0x90) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000140)={[0x7f, 0xffff, 0x9, 0x6, 0x9e, 0x8000, 0xc1, 0xdb85, 0x4, 0x58c0, 0x7fff, 0x2, 0x78bad24, 0x1, 0xa6, 0x113d3196], 0x3000, 0x1000}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) r7 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1, 0x440) ioctl$FS_IOC_FSGETXATTR(r7, 0xc0185500, &(0x7f0000000100)={0x400020323}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BLKIOMIN(r10, 0x1278, &(0x7f0000000200)) [ 230.164364][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.188769][ T8657] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.200127][ T8657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.248974][ T8665] team0: Port device team_slave_0 added [ 230.261793][ T8665] team0: Port device team_slave_1 added [ 230.281861][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.295238][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.304379][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.312680][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.322029][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.337556][ T8662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.407307][ T8665] device hsr_slave_0 entered promiscuous mode [ 230.453914][ T8665] device hsr_slave_1 entered promiscuous mode [ 230.493616][ T8665] debugfs: Directory 'hsr0' with parent '/' already present! [ 230.582678][ T8657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.608442][ T8662] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.655606][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.667533][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.690262][ T8659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.709315][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.729915][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.748839][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.756087][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.765513][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.787884][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.798120][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.809905][ T8659] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.831800][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.843079][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.851992][ T8667] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.859133][ T8667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.867855][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.893141][ T8665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.903043][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 18:14:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001240)=""/241, 0xf1}, {0x0}, {&(0x7f0000001340)=""/44, 0x2c}, {&(0x7f0000001600)=""/166, 0xa6}, {0x0}], 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) [ 230.931104][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.954661][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.982267][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.989565][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.020274][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.028597][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.063900][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.072632][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.079779][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.100717][ T8662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.118998][ T8662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.164081][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.178507][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.198427][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.207418][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.216112][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.224858][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.233586][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.241869][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.250633][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.259720][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.268644][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.277465][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.287159][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.295152][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.302667][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 18:14:46 executing program 2: r0 = socket(0x2, 0x5, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x800, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast2, 0x6}, 0x1c) bind$isdn(r0, &(0x7f0000000000)={0x22, 0x8, 0x1, 0x893, 0x7fff}, 0x6) connect$inet6(r0, &(0x7f0000000e80)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) open$dir(&(0x7f0000000080)='./file0\x00', 0xc0000, 0x0) [ 231.318602][ T8665] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.354009][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.361859][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.373664][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.384490][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.394071][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.402650][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.413621][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.422026][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.445246][ T8659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.470535][ T8662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.479878][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.503042][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.512089][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.519238][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.527182][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.535886][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.544606][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.551663][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.560853][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.569214][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.594331][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.603068][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.612836][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.621583][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.630323][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.638815][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.647145][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.655902][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.675884][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.684398][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.694906][ T8665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.721987][ T8665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.736049][ T8659] 8021q: adding VLAN 0 to HW filter on device batadv0 18:14:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001240)=""/241, 0xf1}, {0x0}, {&(0x7f0000001340)=""/44, 0x2c}, {&(0x7f0000001600)=""/166, 0xa6}, {0x0}], 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 18:14:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, r1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x220000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x58, r5, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) fsetxattr$security_smack_transmute(r3, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x1) r6 = socket$can_raw(0x1d, 0x3, 0x1) fsetxattr$security_smack_entry(r6, &(0x7f0000000140)='security.SMACK64EXEC\x00', &(0x7f0000000180)='!\x8dsystemmime_typeuser\x99-]]\x00', 0x1a, 0x2) read(r2, &(0x7f0000367fe4)=""/91, 0x4f7611ba760ebab5) 18:14:47 executing program 2: setresgid(0xee00, 0xee00, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SECCOMP(0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) accept4$rose(r3, 0x0, &(0x7f0000000000)=0xffffffffffffffac, 0x800) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000004000/0x2000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r11, 0x0, 0x83, &(0x7f0000000200)={'nat\x00', 0x0, 0x3, 0x12, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/18}, &(0x7f0000000180)=0x78) setgid(0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.nlink\x00', &(0x7f0000000300)={'U-', 0x5}, 0x28, 0x2) 18:14:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x58, r5, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000740)={r3}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000780)=0xb, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x604442, 0x0) fsetxattr$trusted_overlay_opaque(r8, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x3) sendmmsg$inet6(r7, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr="fe1e8af691fdf6e77b6dda96d2f30ae1", 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000080)="456ddab1cf524fa22033b64701034c7c77e78efccacd85ee", 0x18}, {&(0x7f0000000180)="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", 0xfb}, {&(0x7f0000000280)="eb3bde3e4248a0d011c5e343ac7d9820df31af3b507444597348ccbb7987ab531c0f13a81b70e7b56eb01292af7222a4ba340647e86e58880e2f3b8044e32bbbd111f6b431eca10c00f9fda828f065d9b4516379ee5d55745f1b292caa75ccab10af5d72e778ef400694f92c0f706beb4eca28959bbd95be3c55442dc32cdbf25426ad6c07dd30c827c6e2594e3fb16eb45f271500c7f3abc72bd3748fd6df30781d0a9836d26a6c3b9da74cfbf0f3485c5e27531ff466a21e400f8f6ddf1d08b285959403e385cf7f3e04a47ed07159c6b0f6b8233563a61d2cb9614a37fbe2874c8b3237", 0xe5}, {&(0x7f0000000100)="32e54b3519f8b80d77b1868d7ae1052c60115d0a9afd", 0x16}], 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="200000000000000029000000040000002f0000000000000005020af200000000200000000000000029000000040000008700000000000000c204000000070000300000000000000029000000360000000c02000000000001c910ff010000000000000000000000000001000000000000"], 0x70}}, {{&(0x7f00000003c0)={0xa, 0x4e23, 0x3, @loopback}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000500)="caa33f70b03901b3c663c0fe8ed0e6035f711913fa01ae64899bfdc3ca2d160a14d58e3da9389c50a324250dee95e6c3def9bb26e30a84192f40488c7249c0f9dd32d1a8bb76cfc9675d323909193ab073ef3de56c0c042b073416c8b8ae6e331b2d465f70857036e61214560903b6ffb6bc7d880cf20e", 0x77}, {&(0x7f0000000580)="8b24a9d41cfb6ebe4e256f86b13905ea33d59f2d1564b1aae05aff33c5bb69a911aa389d15d8541cd21120b00c06957460a84b1ad2ee71d42d80ce", 0x3b}], 0x2}}, {{&(0x7f0000000600)={0xa, 0x4e21, 0xd0d, @remote, 0x3}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000640)="782cc21253ce02e5af3baeaf3dad2913efe82b63e46418f472c15fde716539c6aaf3b0222630d437475200c67df75adff1e22d30657b73351e95dd4e4cfc", 0x3e}, {&(0x7f0000000680)="0b41e90f6b1edd5e2990a0bacbef9b4f575643a17e754e7e407047c537ea4585c98e1e7cf5c4ebf0e087754039dfed0d644154f13987df52db3ce56b65b31239199129cf57d79698b37dec45f68285e6f21758ad102c0131bef0a81348e76c", 0x5f}], 0x2, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x220}}], 0x3, 0x0) 18:14:47 executing program 5: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000000c0), 0x2, 0x1) bind$isdn(r0, &(0x7f0000000080)={0x22, 0x8, 0x3f, 0x80}, 0x6) ioctl$KDGKBLED(r0, 0xc0045401, &(0x7f0000000000)) 18:14:47 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210000000000011a00000100000008000100", @ANYRES32=r1, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040000000000"], 0x58}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x808, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="4c000000120081f87059ae080600000000006b10400103fe0500018701546fabca1b4e7d06a6bd7c493872f750375ed08a5616d6e74703c48f93b82a02000000461eb886a5e54e8ff5314461", 0x4c}], 0x1}, 0x0) [ 232.196570][ T8774] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 232.210086][ T8771] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 18:14:47 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200000, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x22, &(0x7f0000000240)="07ebf98e821801f8ce8e93c3f8213f7f27255b8811a5ebf011d818b12e3e7e07fddb882c455c030133193280749b7b746d7dff7b8b60d6d976293535def7c1f893b81c5ba423f7748ee2a9efc1e911c86f7c3a9797f4c8d3ff8f849f6b4424862d4a4f37248285c06102b95cc6d79b62f870c29af36974f26858eb4684055f63c9dd3bcb03c2fc1a75cefc46c9fd74b94783e57ed8988b24b1743cac140637eb99964480091b579a02d0354cd35036619c23f3a72e008cce1620adef432a9c38cffaecbc7c193e588b0b729493744765e155e44163e84442f098490c9565fe8a90abf94822413e0061c17a92fc17d71ff9998b4e8049", 0xf6) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000), 0x4) close(r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x149402, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r5, 0x200004) r6 = accept(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x80) r7 = socket(0x10, 0x80002, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={r9, 0x5}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={r9, 0x4}, 0x8) sendfile(r1, r5, 0x0, 0x80001d00c0d0) [ 232.275312][ T8784] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 232.309482][ T8786] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 18:14:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001240)=""/241, 0xf1}, {0x0}, {&(0x7f0000001340)=""/44, 0x2c}, {&(0x7f0000001600)=""/166, 0xa6}, {0x0}], 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 18:14:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4aa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x10, 0x80002, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={r8, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000000)={r8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={r9, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) r10 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x81, 0x0) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f00000001c0)={0x9, @win={{0x0, 0x0, 0x34324d59}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 18:14:48 executing program 2: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x0, 0x3}, 0x20) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r5}, 0x10) fcntl$setstatus(r1, 0x4, 0x80000000002c00) [ 232.400964][ T8790] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 18:14:48 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba6, 0x80800001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group\xca\xectat\x00<\xbet\x19\xc1L\xa6\xa4\x04\x1a\xe5#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0J$\x8f\xb1\x9d\x16Z\x9e%@\xceN\x1d]\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x00\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5v\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800009b4b73ee2a0acfed5ff433d65cda1700", @ANYRES16=r3, @ANYBLOB="210000000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040000000000"], 0x58}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r5 = getgid() lchown(&(0x7f00000000c0)='./file0\x00', r4, r5) 18:14:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='asymmetric\x00', &(0x7f00000001c0)='ppp0-ppp0/em1\x06loem1..$em0\x00') r2 = add_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="942913775a85869141ebe6833d549e5126aea35b6180328fa9c5efb5544472d3eb623df0e349a5143f0c2a6a0e526c82835a5e9500be5e2754b4814f3d3c96f12749fc62a67db82bea48a9f9240f372fd024deb8fee29c2896c9d829553298f31fe879", 0x63, r1) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r3, 0x2) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) syz_open_dev$swradio(0x0, 0x0, 0x2) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) 18:14:48 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0xe4ae, 0x2) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000300)="bbb7ef77ba3d416cab3f00a85d34ba00e60a5761cafae5b0032d5834e6ac504e6167cbeb81a8fb66c98bbfb8471f7864c918a0e28af3742ef1e7a2cc5a41d80792e096ab5547edb5073df79346ca5176d48de53c608d5ea579d59e7316944e9cd81eff9bff7fe773027b8d5392a24a687ae9ded8ae6c455d6768cdf9dd5915ac5c4771b03f0a7674ee0b83f86ab8048270f6a76cc22c69e43a974e", 0x9b}, {&(0x7f0000000100)="f713552763ad7445033b5a7fb76cff48a583a1a6fbea3a8c90ea4fee6d82b37a9f93877d711284bbb43b62f5c82b5a8552badc259c91c14eebb510bc7e16a1761ff31b16e7690b30108b31c6555843baa3aac07fdef27bf3bb230e7e1d3cb67f04f7d4e7b0c5795a15ba2296", 0x6c}, {&(0x7f0000000240)="9c768385ce1e2e95a848500b16a5d5f02748e3853d8932f3a13c572e9a17949e9942019be7f2a1a82dfc6284f9b0809141dab4f261d9bf5b33b13a44a3ede5b17ae9c9ff63188fb62ec7b5f72094cbafc72a37480352037ad64cd5e612a32b43bda6680bc30a7f442e63a41d2772ef20e1b4b6f3cb9c7b1dd5fa4aeb3af67d171074ae9464f8dcbe6d0c08fdc39947a77c00944914a70016224d25f241f445b10594e17005dd82ef31aa5781f25590372acc51e9ce4e8ef33f4d", 0xfffffffffffffe8a}, {&(0x7f0000000400)="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", 0xf42}], 0x4) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ec0)='TIPC\x00') r4 = syz_open_dev$swradio(&(0x7f00000026c0)='/dev/swradio#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket(0x10, 0x80002, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000003c0)={0x0, 0x0, 0x62e}) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01008970", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r10}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={r10, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000002700)={r10, 0x2}, &(0x7f0000002740)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000002780)=@sack_info={r11, 0x4, 0x7}, 0xc) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x28, r3, 0x3ddaedfe3f2c2ac5, 0x0, 0x0, {{}, 0x0, 0x3, 0x0, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x51424) 18:14:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010024000000020000000000000001000004000000000000000002000000000000000000000000000004020000000000"], &(0x7f0000000080)=""/236, 0x3e, 0xec, 0x1}, 0x20) 18:14:48 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000014c0)={0x4, 0x2, 0x95}) readv(r0, &(0x7f0000000240), 0x20000000000002ca) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c6c8f3101c0957765726469723d2e3a66"]) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc0189436, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x5}) 18:14:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_hsr\x00', 0x10) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_crypto(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"/438], 0xe8}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r5, 0xc0385650, &(0x7f0000000140)={{0x0, @name="3fdfcbc963950c605a75ef1f1773444155ed50808a7725e238fb3c3d30d5a996"}, 0x8, 0x7, 0x8001}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_mtu(r1, 0x0, 0xb, 0x0, 0x0) 18:14:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x58, r3, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)="96aab0658ef51b9c230e10c416ce3b4354c048385ad046bdc9537aa08a345ad381171222c186ac6710b01e7621fe10c55741c845d6116cfc5d125a53dbdb13b6e0ab1f069ab506659d91edf68c6e18e8fe8b8869a7d82ffa55d989ed519e301e018db16bb59ee432d3c52cda4ab1ad4ef2f68489ca5f26d70adbff978b9f0a531a8414ffb6c54e13de9bcd14a88eb54b8e15a2e92d2f2ae593d4828dfde4e0780564bd64e5ab64e427cfe76d5c528607830bcc8069b7de74f5ff5c53ad37e0", 0xbf, r1}, 0x68) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x6) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)=0x6) [ 233.176069][ T8826] overlayfs: unrecognized mount option "l1À•werdir=.:f" or missing value 18:14:48 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x202000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x80e85411) [ 233.271740][ T8832] overlayfs: unrecognized mount option "l1À•werdir=.:f" or missing value [ 233.294444][ T8833] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 18:14:49 executing program 4: lsetxattr$security_smack_transmute(0x0, &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000700)={'syz', 0x1}, &(0x7f0000000740)="02217713e4d33a14230c0d6afa63bdcf3ba6b918a2bba8e05d424293434b0d501769324ec695ab44cdb10b01c5dacf9b3ef3ab1c241aff79628aa3ba798ed0f035a5b1581a137fdc313b3f979a60f2ef22cf7551396b584c655e6d3402d952b9601a996435891150748f7dea810d788a105d8765318e6a40645b8399b8f8d83b0dd22a3ff89120954bfa260cb065c705bd045f52649b762d", 0x98, 0xfffffffffffffffd) r0 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)="00815be3", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000380)=0x595, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xa7, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) 18:14:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000140)=0xffffffffffffffff) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x100000000000007) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1400008912, &(0x7f0000003300)="11dca50d5e0bcfe47bf070") futex(&(0x7f0000000000)=0x1, 0x3, 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f00000001c0)=0x1, 0x0) sendto$inet(r0, 0x0, 0xfffffce6, 0x900000020000000, &(0x7f0000000180)={0x2, 0x2, @loopback}, 0x10) sendto(r0, &(0x7f00000000c0)="db", 0x1, 0x4000051, 0x0, 0xfffffffffffffe46) 18:14:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000140)=0xffffffffffffffff) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x100000000000007) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1400008912, &(0x7f0000003300)="11dca50d5e0bcfe47bf070") futex(&(0x7f0000000000)=0x1, 0x3, 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f00000001c0)=0x1, 0x0) sendto$inet(r0, 0x0, 0xfffffce6, 0x900000020000000, &(0x7f0000000180)={0x2, 0x2, @loopback}, 0x10) sendto(r0, &(0x7f00000000c0)="db", 0x1, 0x4000051, 0x0, 0xfffffffffffffe46) 18:14:51 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x1) clone(0x8000000101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040), 0x4) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="2e2f66696c65268e375a8b2e2daa3e7ec2f3aa506c372efb446202c6ccdffedc8ed404db5e07b1cc7dd18a5da136577b45050b43ab3116f3e438d0f0da5cd252daff9e06306f9b2005e0184d0528f02e4ba0561799effb641d09a306c585caa777b49887777c6bef92ea26e051e8d5b5d3c2778f00aaec1b78e5bb1ad6a26cf03bff66cd244663fa4af54ce9bd88142ff79b090630d72ada7acd3b26a84a491bc0d0823481f2fe4191969f9a7a8663d1db848ce6"], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='ext4\x00', 0x0, 0x0) 18:14:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x58, r3, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x58, r7, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r8) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000001500)={{0x1, 0x2, 0xf, 0xfffffffffffffffd, 0x0, 0x7f, 0x7, 0x8, 0x7, 0x6355, 0x1, 0x1000}, {0x2, 0x3000, 0x4, 0x3c52, 0x80, 0x9, 0x7, 0x3f, 0x5, 0xd8, 0x70c, 0x7fff}, {0x2000, 0xf000, 0x826ca210d64965ac, 0x2, 0x1000, 0x0, 0x4, 0x3, 0x0, 0x100000001, 0xa337, 0x2}, {0xf000, 0x5000, 0x9, 0x7f, 0x80000001, 0x8, 0x272ce9b, 0x6, 0x7, 0x6, 0x6, 0x4f5}, {0x10000, 0x4000, 0xc, 0x3, 0x2fd5, 0x0, 0x3ff, 0x1, 0xfffffffffffffffc, 0x81, 0x6, 0x1}, {0x38413e1a0faaeea2, 0xf000, 0xa, 0x400, 0x2, 0x1000, 0x40, 0x6, 0x0, 0x6, 0x7, 0x7ff}, {0x10000, 0x0, 0x4, 0x8aa1, 0x3, 0x7be, 0x2, 0xa7b6, 0x0, 0x8, 0x80000001, 0x400}, {0x0, 0x4005, 0x8, 0x6, 0x1, 0x81, 0x5, 0x101, 0x800, 0x6, 0x200, 0x6}, {0x100000, 0x1000}, {0xf000, 0x31003}, 0x0, 0x0, 0x0, 0xa, 0xd, 0x2800, 0x1d800, [0x6, 0x7fff, 0x6, 0x2000000000]}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = accept$nfc_llcp(r10, &(0x7f0000001400), &(0x7f0000000180)=0x60) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r14 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x58, r14, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r13}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) sendmsg$netlink(r1, &(0x7f00000014c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000200)={0x11f0, 0x16, 0x200, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x10f8, 0x5, [@generic="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", @generic="67a475950334d929f7d6064e5d", @typed={0x8, 0x89, @fd}, @generic="52cb8f697ed33b0cb6f798b35beecf3989bccbe5c5c0311c0576be74b48426d990fb01663290b184d267d1d222a5e31c43bf266143f50b290c743baeb68d98a227837cc86b68406c9bd0151ffd4e2d09bd9683706eb1cc7737a8a0bc5d58bc80416179cb37e3ed17cce6f95c683710185802737dcac9", @generic="6ee0f82863819317820ed7bc5752ba4c1a480307cbbeea7f0762ee1feb", @generic="6eca120cc1634d3c62f2f7d907526ac69ab64da407cbbae3ed93baf445a882da182f041e59c5bb1e64a5ed8c4a205f8577e4abd7f59ed56cc07ae3de21254e09a0e02953a8b32efd3ea4"]}, @typed={0x14, 0x93, @ipv6=@mcast2}, @typed={0x8, 0x78, @uid=r4}, @nested={0x10, 0x6c, [@typed={0x8, 0x7, @u32=0x80}, @typed={0x4, 0x30}]}, @generic="d42916a84afb11be26ee6a80bab5c11d962453", @generic="755f3a7f93e61a920c18a9430499fae9d9e1e7ede0d111bd681a48c4edfa714f6c1ffcb6837ef10d0d06fb56d3a192d7dcfcd5520a5a22dfabdcd840ca700f6533c22e0e73ad45a1e4d0d607c2cf0dc4e9b38c28b0d85e7ac5ff3a5d44f1a7545c8b2dc7b0a14e73d172b93eb00cd6008195e4e171b43bce1dcc8715d2dcbc7d96da6f8926097faf624eadeb8c8cb6e34eaba3d276a2d3805678d3b3f95466c520bff93c757b5f"]}, 0x11f0}], 0x1, &(0x7f0000001480)=[@rights={{0x24, 0x1, 0x1, [r5, 0xffffffffffffffff, r11, 0xffffffffffffffff, r12]}}], 0x28, 0x40000000}, 0x4040004) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 18:14:51 executing program 5: syz_open_dev$char_usb(0xc, 0xb4, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) r2 = accept$inet6(r1, 0x0, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@mcast1, @in6=@initdev}}, {{}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xb0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) setresuid(r3, r5, r7) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) 18:14:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8246200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000c659ca807737f405000200000000960000000000000000200000000000000000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424af8c63ab6fd1845b0c90c78bf8059655", 0x58}], 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x7}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) accept$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x7}]}}]}, 0x38}}, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$netlink(0x10, 0x3, 0x0) r18 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r19}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r19, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x7}]}}]}, 0x38}}, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x188, r2, 0x20, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x120, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6114}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x3, 0x4, 0x67, 0xca}, {0xb1, 0x4, 0x2, 0x1}, {0x7, 0xfffffffffffffffb, 0x1f}, {0x2, 0xabb, 0x9, 0x4}, {0x3, 0x3, 0x4416, 0x20}, {0xffff, 0x260, 0x6, 0x7}, {0xee71, 0xee, 0x7ff, 0x9}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r15}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r19}}}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x800}, 0x3bbb747a6deba392) 18:14:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0xca) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x80) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000380)) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000240)={0x8, &(0x7f0000000200)=[{0x0}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000280)={r3, 0x3}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={r3, &(0x7f0000000140)=""/98}) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000080)="e3", 0xffffffffffffff30, 0x4044050, 0x0, 0x105) socket$nl_xfrm(0x10, 0x3, 0x6) [ 235.570955][ T8888] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:14:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x4}, 0x10) write(r0, &(0x7f0000000140)="240000001a005f0014f9f407000900000200000000000000ffff00000900020000000000", 0xffffffffffffffe4) mq_open(&(0x7f0000000000)='\x00', 0x80, 0x82, &(0x7f0000000040)={0xffffffffffff8000, 0x142d21c0, 0x9, 0x5, 0x6, 0x57d, 0x3, 0x9}) [ 235.653540][ T8890] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 18:14:51 executing program 5: accept$unix(0xffffffffffffffff, 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x400, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x3a4, 0x0, 0x0, 0x0, 0x9}}], 0x11, 0x0, 0x0) 18:14:51 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x250}) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x58, r5, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x7}]}}]}, 0x38}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x324}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x7}]}}]}, 0x38}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r16 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x58, r16, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r15}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) r19 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r20}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r20, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x7}]}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000280)={'vlan0\x00', r20}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe0, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8}, {0x7c, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x80004) r22 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r22, @ANYBLOB="210000000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400000000008e1a70e952cb2a5498c33b873d65eb3b3e4ccad3a7a6a54a9ac0b761387fa56b3cddb6ebdd28f859fbb8881774518061b7b4f3f3501887a856510bcdc2"], 0x58}}, 0x0) sync_file_range(r1, 0xffffffff, 0x4, 0x0) 18:14:51 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0xc0080) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000140)={0x3, 0x48, 0xfffffffffffffffa, 0x1fb948e3, 0x4, 0x10001, 0x9, 0x8000, 0x1, 0x3f, 0x2, 0x80000001, 0xfa, 0x5, &(0x7f0000000240)=""/133, 0x4, 0x100000000, 0x1}) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x227a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc070d3f500000000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x58, r4, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) write$binfmt_aout(r2, &(0x7f0000000380)={{0x264, 0x81, 0xfffffffffffffff7, 0x2a8, 0x3e8, 0x6, 0x3b8, 0x4}, "cea9b7cf3fcde642b66e428dd566c5e0324f3287cd19d5a4c87242ac32d0d198e567fa7a022dde7b3ee7b06c00d5b1c094d46cfee0f9303f36a9fa3edf2b7860164969988d7d5c46f8c843b6baf6feeccd5d0bd897290af70d9c8348e9df705de982c32815fd8901bca60efab8dba9dae8014be3e66bb0d4fca0f405d2de9a19e64439aa811787be80370ba694f930dc7f2de6faf8c450bf1a9b7df64c6228ba8ba69e55ef28c283888271284324a55b54186df8c9657b87849a32ffcaec0e3cf0cd6c37b116cda867050052895e4ba112dcc0c7dbe8", [[], []]}, 0x2f6) [ 235.738865][ T8901] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 235.764736][ T8890] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 18:14:51 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x101, 0x20000) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/21, 0x15, 0x6, 0x101, 0x5, 0x2, 0x10001}, 0x120) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001080)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0x388, 0x0) write$FUSE_NOTIFY_STORE(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001a80)=""/34, 0x22}], 0x1}}], 0x2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000007c0)='status\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) [ 235.834369][ T8908] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 18:14:51 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x13c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x9, 0x100000001, 0x7fffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x9165a000, 0x80000000}], 0x0) 18:14:51 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) open(0x0, 0x0, 0x0) stat(0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={r2, @loopback, @remote}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00df250700000052074638d5db71a10c8cfa9828ab6da703d697423b6004f49e44a39fcbe97e85508eb4f93e8dd4ea8af8b03f5a1f451a9515a4e2526e0100b665d3cb2b2b25ecb0e38b6431bbcc00"/94, @ANYRES32=r3, @ANYBLOB="00000000000800000c0002007f4518939de8000008002100040000000800100000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x240400f0}, 0x40040) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 18:14:51 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=@framed={{0xffffffb4, 0x4000, 0x7000000, 0x200000000000000, 0x0, 0x15, 0x0, 0x20001}, [@ldst]}, &(0x7f0000000000)='\x00\x00\x00j\xff\xff\x9b\xff\xff\xf1s\x94\x9f\xaa!\xccQ\xd7\xa9\xcc\r1\xc2\a\x8f\xf8Ov\xbd\xd2\xef\xb2\xad\x1bd/\x10\xfebn\xdc#\xee\xfcl3w\x9d\xc3\xc7\f:\x98R\x9b?\xcfDl\x93Krp\xa1Z\x11H_\x89C\xa3#N\x9dHM\x17\xa6^\x80\xed\xd2\x02=U`rw\xcbtTEP\xbd\xb4\xaf\x93\x97\xea@\xb1\xa4\xe4\xe7Y\xa1\xcf,', 0x0, 0xc3, &(0x7f0000000200)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1d) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3, 0x10000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x25, "d413ad847ad883c5b69a7132761d32e11f7bca2e8186198d84fcc041ab012bb726921a81e3"}, &(0x7f0000000100)=0x2d) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1}, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x80002, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) rt_sigpending(&(0x7f00000003c0), 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000300)={r7, 0x7613182f, 0x20, 0x3ff, 0x80000000}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000380)=r8, 0x4) [ 236.163996][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 236.170425][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 236.233310][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 236.239220][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 236.411301][ T8929] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.570623][ T8931] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.577930][ T8931] bridge0: port 1(bridge_slave_0) entered forwarding state 18:14:52 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000280)={{}, 0x58a8582717f97800}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000000)={0x3, 0x2, {0xfffffffffffffffd, 0x0, 0x7, 0x1, 0xfffffffffffffff8}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000100)={0x4, 0x2, {0x1, 0x3, 0x400, 0x2, 0x3f}}) 18:14:52 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x8042, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x3) write$P9_RREADLINK(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x58, r6, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="210000000000000000000100000008000100", @ANYRES32=r8, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040000000000"], 0x58}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r12 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x58, r12, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000080)=[r4, r7, r10], 0x3) 18:14:52 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r2, 0x2081ff) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) fcntl$setstatus(r3, 0x4, 0x46600) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) socket$tipc(0x1e, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) 18:14:52 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x7}]}}]}, 0x38}}, 0x0) bind$can_raw(r4, &(0x7f0000000040)={0x1d, r8}, 0x10) 18:14:52 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x13c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x9, 0x100000001, 0x7fffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x9165a000, 0x80000000}], 0x0) [ 236.953313][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 236.959170][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:14:52 executing program 2: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x2342e1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 237.003050][ T8929] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.170688][ T8952] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.177879][ T8952] bridge0: port 1(bridge_slave_0) entered forwarding state 18:14:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/d\x00', 0x0, 0x103482) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x220200) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x300030}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="e933174b16bf36086763de94ae400ef0dc03c5534a6efe99da1b9d2d5aa312cbd8ad503e413ba62c85f4af97cae1e35e756d77d803b2bd577e6631d08afb16b0d378854f161c4dd64e8c2dc5d0f0516c33b5bf6a6195999d93f076ae01e71d9efb80874bb52fc8cd14f8b7705d5a7298a99bf16a73d61dbb30d0a11f614edc21366563fcd6adb6a5dab2868d0c104c81dc464f1f83798340ee98c509e5f801afccae377d5eb1ae74ca1e1597e50007266d0ab709e5864aa8de12bd3ee48254d75d7e7540c63eeb13eabdf0c88793e6bbf3222a387f2cb558250bdc0fa640528698569594a6215cbc48eb579a871b430c588d357411890b8fdacfc9b745ccd9968fee4d13f311c435f0228479b4", @ANYRES16=r2, @ANYBLOB="00022dbd7000fcdbdf25030000000c0004000900000000000000"], 0x20}}, 0x80) read(r0, 0x0, 0x0) 18:14:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) open(0x0, 0x0, 0x0) stat(0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={r2, @loopback, @remote}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00df250700000052074638d5db71a10c8cfa9828ab6da703d697423b6004f49e44a39fcbe97e85508eb4f93e8dd4ea8af8b03f5a1f451a9515a4e2526e0100b665d3cb2b2b25ecb0e38b6431bbcc00"/94, @ANYRES32=r3, @ANYBLOB="00000000000800000c0002007f4518939de8000008002100040000000800100000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x240400f0}, 0x40040) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) [ 237.213614][ T8953] validate_nla: 10 callbacks suppressed [ 237.213623][ T8953] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 18:14:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000000)) 18:14:53 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x114, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x11}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x66}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd5af}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfe9e}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9cb7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'teql0\x00'}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x810}, 0x60044411) [ 237.433314][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 237.439138][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:14:53 executing program 3: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000080)=""/4096) request_key(&(0x7f0000001080)='logon\x00h\xdc%K\xce%\xd6\xac\xf10]#S\xc4\x02J\x99\x84\xbc\xdf\xd3\xeb\xdes\xea\x97\x96\x1f+\x13D=O\xe7GdpUC\x97\x12\xce4\xe2$\x9cgww\x8d\xe6\xb4\x15\x98\x18\xc9r\x7f\xc6\xd1]\xd4F\xa2\x1b\x95gJ/\xcd\xe5\xdf\xdd\xd8\b\xcc\x8f\xec\xa5\xe6', &(0x7f0000000000)={'syz', 0x1}, 0xfffffffffffffffd, 0x0) 18:14:53 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x114, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x11}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x66}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd5af}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfe9e}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9cb7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'teql0\x00'}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x810}, 0x60044411) 18:14:53 executing program 3: prctl$PR_GET_NO_NEW_PRIVS(0x27) setrlimit(0x9, &(0x7f00000002c0)) io_setup(0xf0, &(0x7f0000000340)) 18:14:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/\x00et/tun\x00', 0x525440, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x10001, 0x441) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000280)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'all\x00\x19\x00\x00!C\x19\xb2d\xb4\xa0\xb4v', 0x2}) r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x3, 0x121c01) pwritev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="565d869e047e7040ed03d4bec00a2a103d2784401f88d9671d5ab7ee90596848c21eb1690e074c34f3b20954bba12de7b88b1f9d1835a882af3edcb98ba6f68f51e85666570845a37b6c373eb2ed5dfba4d03ce2fa8fe7af83ff391d9243ed990381ec0feccbf9bdd296511da3223d3f13659c4c9f3adf684e1b3e63155d5d408fa526343cd9efadb2cd95663e546b", 0x8f}, {&(0x7f0000000180)="315a05c2097dd896283793c5b093318dfbe69ecb42aa9490144049bfe58b54c8c6b117f99c80a940ff585c5bc167b622ad00cd51852b45b02332fba7adb75844ca00e711defad04f1f66e87f7cb3e07457d278ed", 0x54}], 0x2, 0x0) [ 237.913318][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 237.919207][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:14:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x58, r4, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x100, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x3f}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05000000000000000000010000000000000008410000004c0018000000006962000000000000000000000000000000000000000000000000000000000000000000df00"/98], 0x68}}, 0x0) 18:14:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socket$inet_dccp(0x2, 0x6, 0x0) [ 237.961308][ T8990] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.047395][ T9016] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 238.091917][ T9020] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 18:14:53 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000d, 0x8c011, r0, 0x80000000) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000000)={0x4, 0x0, @ioapic={0x4000, 0x3f, 0x6, 0x1, 0x0, [{0x3f, 0x6, 0x5d5, [], 0x767}, {0x9, 0x5, 0x311, [], 0x7}, {0x375, 0x100000001, 0x100, [], 0x8000000000000}, {0x4, 0x2, 0x9, [], 0x80}, {0x3, 0x3000, 0x8, [], 0xfffffffffffffffd}, {0x7, 0x37, 0x3ff, [], 0x2fe692eb}, {0xfffffffffffffffe, 0x385, 0x2d, [], 0xfff}, {0x8000, 0xce7, 0x1000004, [], 0x7}, {0x5, 0xa2, 0x200, [], 0x3}, {0x1ff, 0x7f, 0x3, [], 0xfffffffffffffffd}, {0xc5, 0xb6dd, 0x4, [], 0x1}, {0x1000, 0xc69b, 0x7, [], 0x489}, {0xff, 0x8, 0x6, [], 0x6}, {0x9d, 0x80, 0x411, [], 0x1}, {0x8, 0x1, 0x400, [], 0x14}, {0x4fee, 0x6, 0x1, [], 0x9}, {0x6, 0x7d67, 0x7fff}, {0xb850, 0xfff, 0x8000, [], 0x5}, {0x1044, 0x8d, 0x1000, [], 0x8001}, {0x7, 0x3fffc00000, 0x3f, [], 0x1}, {0x54, 0x1000, 0x7ff, [], 0x8}, {0x8, 0xd1, 0x100000000006, [], 0x7c02}, {0xffffffffffffffff, 0x5, 0x7, [], 0x5}, {0x4, 0xf0, 0x0, [], 0x7}]}}) r1 = socket$pppoe(0x18, 0x1, 0x0) fadvise64(r1, 0x0, 0x7f, 0x3) [ 238.214438][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.250919][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.258092][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state 18:14:53 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x80045530, &(0x7f0000000180)) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x6618) 18:14:53 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x76, 0x440) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000d40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000e80)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="080727bd7000fcdbdf250200000014000900fe80000000000000006e90cc86c45783458dee45d2cd000000000000aa08000a004e2400001400090027ed368b6923338a505c8cc58ab0e12308000400030000000800020002000000080001004e22000308000a004e230000140009000000000000000000000000000000000108000600e0000002"], 0x80}, 0x1, 0x0, 0x0, 0x20008112}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = gettid() syz_open_dev$cec(0x0, 0x2, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup2(r13, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x212874b47bf12c0a, 0x0) sendmsg$NBD_CMD_STATUS(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a80)={0x74, r5, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x79}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r8}, {0x8, 0x1, r11}, {0x8, 0x1, r14}, {0x8, 0x1, r15}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xacad}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x74}}, 0x809) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r16, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r17 = dup3(r2, r16, 0x0) tkill(r3, 0x1002000000016) accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r17, 0xc4c85513, &(0x7f0000000580)={{0x4, 0x3, 0x1, 0x7fffffff, 'syz0\x00', 0x3}, 0x1, [0x2, 0x0, 0x80000001, 0x66, 0x2, 0xffffffffffffffff, 0x8, 0x101, 0x80, 0x0, 0x8001, 0x1f, 0x4794, 0xffffffffffffffeb, 0x6, 0x7, 0x9, 0x2, 0x0, 0x3, 0x80000000, 0x401, 0x8, 0x1, 0x6, 0x0, 0x778, 0x2, 0x4b4, 0x0, 0x4, 0x3, 0x5, 0x3f, 0x0, 0x2, 0xfff, 0x0, 0x6, 0x4, 0x5b863b1b, 0x6000000000, 0x9, 0x5, 0x0, 0x10001, 0x7fff, 0xffffffff00000001, 0x5, 0x3, 0x8, 0x7fff, 0x5, 0x7fffffff, 0x0, 0x7, 0x22, 0x0, 0xb9, 0x0, 0x5, 0x7fffffff, 0x0, 0xfffffffffffffffc, 0x1, 0x2, 0x6b53, 0xffffffff, 0x96f1, 0x7f, 0x0, 0x7ff, 0x7, 0x4a5, 0x2, 0x0, 0x0, 0x7, 0x7, 0x8, 0xeae, 0x9, 0x0, 0x9, 0xce, 0x4, 0x200, 0x101, 0x2, 0x5823, 0x1000ffff, 0x8, 0x0, 0x4, 0x0, 0x0, 0x7000000, 0x9, 0x8, 0x1e, 0xfffffffffffffc01, 0x8, 0x850, 0x80, 0x1, 0x2, 0xea01, 0x200, 0x8, 0x0, 0x8, 0x101, 0x10000, 0x1, 0x9, 0x0, 0x10000000, 0x101, 0x7, 0xfffffffffffff5a3, 0x100, 0x7fffffff, 0x2, 0x10001, 0x1, 0x6, 0x200, 0x10000], {0x0, 0x1c9c380}}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r17, 0x84, 0x8, &(0x7f00000000c0)=0xfff, 0x4) r18 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000340)={&(0x7f00000016c0)={0x210, r18, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0xbc, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x83}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x20000000000000, @loopback, 0x101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @rand_addr="8076c3a432dfcf4a57ea66fa54b67a7c", 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x30, 0x1, 'ss?~\x0f\xf3\"D=XTKe\xdd\x9ce\xael\xee\xdaK\x9bk\x0f|C\xdbR\xfew\xb3~r\xa0qN\xe0\x00y\xd5\xe5\x8e'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x94, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffa}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfdd4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x40040d4}, 0x40004) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000400)) syz_init_net_socket$ax25(0x3, 0x0, 0x0) 18:14:54 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x280500, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000300)={{0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) perf_event_open$cgroup(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000e40)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_mreqsrc(r6, 0x0, 0xbce7935f21418051, &(0x7f0000000180)={@dev, @empty, @local}, &(0x7f00000001c0)=0xc) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000a80)='SEG6\x00') vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:14:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x58, r4, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x58, r7, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000040)={'ipddp0\x00', 0x9}) 18:14:54 executing program 2: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000200)="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") r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup3(r5, 0xffffffffffffffff, 0x80000) r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='memory.current\x00', 0x0, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000200)={r8}) r9 = dup2(r8, r7) r10 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r10, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x2, 0x100000003, 0x1, 0xffffffffffffffc0, 0x31f9, 0x400000000}, 0x19c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) connect$inet6(r10, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r11 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r10, r11, &(0x7f0000000240)=0x202, 0x4000000000dc) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r11, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r12, 0xc05, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x48030580}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9fca168b0304016681fcee38d7a82975f15c53e91d953787243292f35c9f7b600ba3cdd34955849473a5579f54479f000000080000006b8007ab6451e4b665b61594bc625191021eddbcfb4ed928467ac4ff0789b2d8e020e375b34b7a57e7d1c8e2b7474d061e0d02a41b0161c79eb2ec57a45eae89df8ef3c455ba1cef5422a3ee8c9dd6c8fba00b82f51d1a5571a495ec66b82313334f99f44db81369d8ced92767a04a35330195fb59a34b6142fbc5093bd85b89c9ec9faf7cc14de531de162143d212a86c84ed82", @ANYRES16=r12, @ANYBLOB="000129bd7000fedbdf25020000000c0004000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r14 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000005780)='/dev/dlm-control\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000005880)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005840)={&(0x7f00000057c0)={0x48, r12, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r13}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r14}, {0x8, 0x1, r4}]}]}, 0x48}}, 0x4) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000080)={0x7fffffff, 0x1b, 0x330, 0x5, "02ae32aabe511ed56a6e74459ecb46104afc6a96fe52150b0f4a0dec52c4208f"}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r1, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) poll(&(0x7f00000001c0)=[{r1}, {r0}, {}], 0x3, 0x0) [ 238.561290][ T9042] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 238.607643][ T9042] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 18:14:54 executing program 2: open(&(0x7f0000000040)='./file0\x00', 0x10008043, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000000)=0x7) mount$9p_rdma(&(0x7f0000000400)='127.0.0.1\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDADDIO(r5, 0x4b34, 0xfffffffffffffff7) [ 238.650554][ T9044] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 18:14:54 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x76, 0x440) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000d40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000e80)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="080727bd7000fcdbdf250200000014000900fe80000000000000006e90cc86c45783458dee45d2cd000000000000aa08000a004e2400001400090027ed368b6923338a505c8cc58ab0e12308000400030000000800020002000000080001004e22000308000a004e230000140009000000000000000000000000000000000108000600e0000002"], 0x80}, 0x1, 0x0, 0x0, 0x20008112}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = gettid() syz_open_dev$cec(0x0, 0x2, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup2(r13, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x212874b47bf12c0a, 0x0) sendmsg$NBD_CMD_STATUS(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a80)={0x74, r5, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x79}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r8}, {0x8, 0x1, r11}, {0x8, 0x1, r14}, {0x8, 0x1, r15}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xacad}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x74}}, 0x809) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r16, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r17 = dup3(r2, r16, 0x0) tkill(r3, 0x1002000000016) accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r17, 0xc4c85513, &(0x7f0000000580)={{0x4, 0x3, 0x1, 0x7fffffff, 'syz0\x00', 0x3}, 0x1, [0x2, 0x0, 0x80000001, 0x66, 0x2, 0xffffffffffffffff, 0x8, 0x101, 0x80, 0x0, 0x8001, 0x1f, 0x4794, 0xffffffffffffffeb, 0x6, 0x7, 0x9, 0x2, 0x0, 0x3, 0x80000000, 0x401, 0x8, 0x1, 0x6, 0x0, 0x778, 0x2, 0x4b4, 0x0, 0x4, 0x3, 0x5, 0x3f, 0x0, 0x2, 0xfff, 0x0, 0x6, 0x4, 0x5b863b1b, 0x6000000000, 0x9, 0x5, 0x0, 0x10001, 0x7fff, 0xffffffff00000001, 0x5, 0x3, 0x8, 0x7fff, 0x5, 0x7fffffff, 0x0, 0x7, 0x22, 0x0, 0xb9, 0x0, 0x5, 0x7fffffff, 0x0, 0xfffffffffffffffc, 0x1, 0x2, 0x6b53, 0xffffffff, 0x96f1, 0x7f, 0x0, 0x7ff, 0x7, 0x4a5, 0x2, 0x0, 0x0, 0x7, 0x7, 0x8, 0xeae, 0x9, 0x0, 0x9, 0xce, 0x4, 0x200, 0x101, 0x2, 0x5823, 0x1000ffff, 0x8, 0x0, 0x4, 0x0, 0x0, 0x7000000, 0x9, 0x8, 0x1e, 0xfffffffffffffc01, 0x8, 0x850, 0x80, 0x1, 0x2, 0xea01, 0x200, 0x8, 0x0, 0x8, 0x101, 0x10000, 0x1, 0x9, 0x0, 0x10000000, 0x101, 0x7, 0xfffffffffffff5a3, 0x100, 0x7fffffff, 0x2, 0x10001, 0x1, 0x6, 0x200, 0x10000], {0x0, 0x1c9c380}}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r17, 0x84, 0x8, &(0x7f00000000c0)=0xfff, 0x4) r18 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000340)={&(0x7f00000016c0)={0x210, r18, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0xbc, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x83}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x20000000000000, @loopback, 0x101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @rand_addr="8076c3a432dfcf4a57ea66fa54b67a7c", 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x30, 0x1, 'ss?~\x0f\xf3\"D=XTKe\xdd\x9ce\xael\xee\xdaK\x9bk\x0f|C\xdbR\xfew\xb3~r\xa0qN\xe0\x00y\xd5\xe5\x8e'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x94, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffa}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfdd4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x40040d4}, 0x40004) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000400)) syz_init_net_socket$ax25(0x3, 0x0, 0x0) [ 238.710082][ T9042] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 18:14:54 executing program 3: setitimer(0x1, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getitimer(0x6, &(0x7f0000000000)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x7}]}}]}, 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x5, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x7}]}}]}, 0x38}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x7}]}}]}, 0x38}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @empty, @multicast1}, &(0x7f0000000140)=0xc) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$netlink(0x10, 0x3, 0x0) r18 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r19}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r19, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x7}]}}]}, 0x38}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) r21 = socket$nl_route(0x10, 0x3, 0x0) r22 = socket$netlink(0x10, 0x3, 0x0) r23 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r24}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r21, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r24, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x7}]}}]}, 0x38}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x310, r2, 0x20, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x26c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6fb}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r19}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r20}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r24}}}]}}]}, 0x310}, 0x1, 0x0, 0x0, 0x8000}, 0x50) 18:14:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x32e) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100"/24]) 18:14:54 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 238.930959][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 238.985104][ T9061] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 239.030275][ T9058] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. 18:14:54 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x210142) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x0, &(0x7f0000000080)=""/7) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f0000000280)={{0x1, @name="5d05a3ef292adafa99818dc75c8add25562b28a8f85d60b0d8f625568ad318cb"}, "9cecb1f5dfcb4096ccd80e5e6d3b7194147efd3136a21ca9782cbbe7fef79f16", 0x1}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 18:14:54 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x280500, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000300)={{0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) perf_event_open$cgroup(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000e40)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_mreqsrc(r6, 0x0, 0xbce7935f21418051, &(0x7f0000000180)={@dev, @empty, @local}, &(0x7f00000001c0)=0xc) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000a80)='SEG6\x00') vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:14:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000380)={0x2, 0x0, 0x2080, {0x0, 0x100000}, [], "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", "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"}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="1020f5f2010007000a000000030000000c00000009", 0x15, 0x1400}], 0x0, 0x0) [ 239.388199][ T9073] bond0: (slave bond_slave_1): Releasing backup interface [ 239.431710][ T9081] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 239.456934][ T9081] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 239.508964][ T9081] F2FS-fs (loop2): Invalid log sectors per block(3) log sectorsize(10) [ 239.540146][ T9081] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 18:14:55 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x76, 0x440) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000d40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000e80)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="080727bd7000fcdbdf250200000014000900fe80000000000000006e90cc86c45783458dee45d2cd000000000000aa08000a004e2400001400090027ed368b6923338a505c8cc58ab0e12308000400030000000800020002000000080001004e22000308000a004e230000140009000000000000000000000000000000000108000600e0000002"], 0x80}, 0x1, 0x0, 0x0, 0x20008112}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = gettid() syz_open_dev$cec(0x0, 0x2, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup2(r13, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x212874b47bf12c0a, 0x0) sendmsg$NBD_CMD_STATUS(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a80)={0x74, r5, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x79}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r8}, {0x8, 0x1, r11}, {0x8, 0x1, r14}, {0x8, 0x1, r15}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xacad}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x74}}, 0x809) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r16, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r17 = dup3(r2, r16, 0x0) tkill(r3, 0x1002000000016) accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r17, 0xc4c85513, &(0x7f0000000580)={{0x4, 0x3, 0x1, 0x7fffffff, 'syz0\x00', 0x3}, 0x1, [0x2, 0x0, 0x80000001, 0x66, 0x2, 0xffffffffffffffff, 0x8, 0x101, 0x80, 0x0, 0x8001, 0x1f, 0x4794, 0xffffffffffffffeb, 0x6, 0x7, 0x9, 0x2, 0x0, 0x3, 0x80000000, 0x401, 0x8, 0x1, 0x6, 0x0, 0x778, 0x2, 0x4b4, 0x0, 0x4, 0x3, 0x5, 0x3f, 0x0, 0x2, 0xfff, 0x0, 0x6, 0x4, 0x5b863b1b, 0x6000000000, 0x9, 0x5, 0x0, 0x10001, 0x7fff, 0xffffffff00000001, 0x5, 0x3, 0x8, 0x7fff, 0x5, 0x7fffffff, 0x0, 0x7, 0x22, 0x0, 0xb9, 0x0, 0x5, 0x7fffffff, 0x0, 0xfffffffffffffffc, 0x1, 0x2, 0x6b53, 0xffffffff, 0x96f1, 0x7f, 0x0, 0x7ff, 0x7, 0x4a5, 0x2, 0x0, 0x0, 0x7, 0x7, 0x8, 0xeae, 0x9, 0x0, 0x9, 0xce, 0x4, 0x200, 0x101, 0x2, 0x5823, 0x1000ffff, 0x8, 0x0, 0x4, 0x0, 0x0, 0x7000000, 0x9, 0x8, 0x1e, 0xfffffffffffffc01, 0x8, 0x850, 0x80, 0x1, 0x2, 0xea01, 0x200, 0x8, 0x0, 0x8, 0x101, 0x10000, 0x1, 0x9, 0x0, 0x10000000, 0x101, 0x7, 0xfffffffffffff5a3, 0x100, 0x7fffffff, 0x2, 0x10001, 0x1, 0x6, 0x200, 0x10000], {0x0, 0x1c9c380}}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r17, 0x84, 0x8, &(0x7f00000000c0)=0xfff, 0x4) r18 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000340)={&(0x7f00000016c0)={0x210, r18, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0xbc, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x83}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x20000000000000, @loopback, 0x101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @rand_addr="8076c3a432dfcf4a57ea66fa54b67a7c", 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x30, 0x1, 'ss?~\x0f\xf3\"D=XTKe\xdd\x9ce\xael\xee\xdaK\x9bk\x0f|C\xdbR\xfew\xb3~r\xa0qN\xe0\x00y\xd5\xe5\x8e'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x94, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffa}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfdd4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x40040d4}, 0x40004) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000400)) syz_init_net_socket$ax25(0x3, 0x0, 0x0) [ 240.596546][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 345.553206][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 345.560011][ C0] rcu: 0-...!: (10545 ticks this GP) idle=a2a/1/0x4000000000000004 softirq=10666/10667 fqs=168 [ 345.570695][ C0] (t=10502 jiffies g=9433 q=391) [ 345.575717][ C0] rcu: rcu_preempt kthread starved for 10167 jiffies! g9433 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 345.586975][ C0] rcu: RCU grace-period kthread stack dump: [ 345.592866][ C0] rcu_preempt I29552 10 2 0x80004000 [ 345.599198][ C0] Call Trace: [ 345.602571][ C0] __schedule+0x76e/0x17a0 [ 345.606989][ C0] ? __sched_text_start+0x8/0x8 [ 345.611835][ C0] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 345.617636][ C0] ? schedule_timeout+0x47c/0xc50 [ 345.622655][ C0] ? lockdep_hardirqs_on+0x418/0x5d0 [ 345.627938][ C0] schedule+0xd9/0x260 [ 345.632003][ C0] schedule_timeout+0x486/0xc50 [ 345.636844][ C0] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 345.642647][ C0] ? usleep_range+0x170/0x170 [ 345.647315][ C0] ? trace_hardirqs_on+0x67/0x240 [ 345.652329][ C0] ? __kasan_check_read+0x11/0x20 [ 345.657351][ C0] ? __next_timer_interrupt+0x1a0/0x1a0 [ 345.662894][ C0] ? swake_up_one+0x60/0x60 [ 345.667397][ C0] rcu_gp_kthread+0x9b2/0x18d0 [ 345.672160][ C0] ? invoke_rcu_core+0x230/0x230 [ 345.677092][ C0] ? trace_hardirqs_on+0x67/0x240 [ 345.682105][ C0] ? __kasan_check_read+0x11/0x20 [ 345.687126][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 345.693368][ C0] ? __kthread_parkme+0x108/0x1c0 [ 345.698380][ C0] ? __kasan_check_read+0x11/0x20 [ 345.703413][ C0] kthread+0x361/0x430 [ 345.707483][ C0] ? invoke_rcu_core+0x230/0x230 [ 345.712416][ C0] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 345.718659][ C0] ret_from_fork+0x24/0x30 [ 345.723127][ C0] NMI backtrace for cpu 0 [ 345.727458][ C0] CPU: 0 PID: 8639 Comm: syz-fuzzer Not tainted 5.3.0-rc6-next-20190830 #75 [ 345.736113][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.746154][ C0] Call Trace: [ 345.749429][ C0] [ 345.752346][ C0] dump_stack+0x172/0x1f0 [ 345.756680][ C0] nmi_cpu_backtrace.cold+0x70/0xb2 [ 345.761870][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.768112][ C0] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 345.773736][ C0] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 345.779707][ C0] arch_trigger_cpumask_backtrace+0x14/0x20 [ 345.785589][ C0] rcu_dump_cpu_stacks+0x183/0x1cf [ 345.790695][ C0] rcu_sched_clock_irq.cold+0x4fd/0xc12 [ 345.796236][ C0] ? raise_softirq+0x138/0x340 [ 345.801000][ C0] update_process_times+0x2d/0x70 [ 345.806013][ C0] tick_sched_handle+0xa2/0x190 [ 345.810856][ C0] tick_sched_timer+0x53/0x140 [ 345.815614][ C0] __hrtimer_run_queues+0x364/0xe40 [ 345.820805][ C0] ? tick_sched_do_timer+0x1b0/0x1b0 [ 345.826085][ C0] ? hrtimer_sleeper_start_expires+0x90/0x90 [ 345.832059][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 345.837770][ C0] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 345.843838][ C0] hrtimer_interrupt+0x314/0x770 [ 345.848783][ C0] smp_apic_timer_interrupt+0x160/0x610 [ 345.854322][ C0] apic_timer_interrupt+0xf/0x20 [ 345.859301][ C0] RIP: 0010:hhf_dequeue+0x6ab/0xa20 [ 345.864498][ C0] Code: 84 c6 f9 ff ff e8 85 e6 a6 fb 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 0f 85 08 03 00 00 48 89 d8 49 89 9d 98 03 00 00 48 c1 e8 03 <42> 80 3c 20 00 0f 85 b4 02 00 00 48 8b 45 c8 48 8d 7b 08 48 89 03 [ 345.884263][ C0] RSP: 0000:ffff8880ae8098c8 EFLAGS: 00000a06 ORIG_RAX: ffffffffffffff13 [ 345.892664][ C0] RAX: 1ffff11013248e5f RBX: ffff8880992472f8 RCX: ffffffff85cb6f79 [ 345.900624][ C0] RDX: 0000000000000100 RSI: ffffffff85cb6f8b RDI: 0000000000000001 [ 345.908588][ C0] RBP: ffff8880ae809918 R08: ffff8880a12c2400 R09: fffffbfff14ed341 [ 345.916550][ C0] R10: ffff8880a12c2d40 R11: ffff8880a12c2400 R12: dffffc0000000000 [ 345.924513][ C0] R13: ffff888099247000 R14: ffff888099247398 R15: ffff888099247390 [ 345.932490][ C0] ? apic_timer_interrupt+0xa/0x20 [ 345.937604][ C0] ? hhf_dequeue+0x679/0xa20 [ 345.942206][ C0] ? hhf_dequeue+0x68b/0xa20 [ 345.946795][ C0] ? hhf_dequeue+0x68b/0xa20 [ 345.951596][ C0] __qdisc_run+0x1e7/0x19d0 [ 345.956107][ C0] ? dev_queue_xmit+0x18/0x20 [ 345.960789][ C0] __dev_queue_xmit+0x16f1/0x37c0 [ 345.965810][ C0] ? __kasan_check_read+0x11/0x20 [ 345.970828][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.977069][ C0] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 345.982385][ C0] ? __copy_skb_header+0x210/0x560 [ 345.987516][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 345.993068][ C0] ? __kasan_check_write+0x14/0x20 [ 345.998168][ C0] ? __skb_clone+0x5c8/0x820 [ 346.002758][ C0] dev_queue_xmit+0x18/0x20 [ 346.007256][ C0] ? dev_queue_xmit+0x18/0x20 [ 346.011966][ C0] hsr_forward_skb+0xd29/0x1d30 [ 346.016825][ C0] send_hsr_supervision_frame+0x8bf/0xf20 [ 346.022621][ C0] ? lock_acquire+0x190/0x410 [ 346.027307][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.033600][ C0] hsr_announce+0x12f/0x3b0 [ 346.038094][ C0] call_timer_fn+0x1ac/0x780 [ 346.042690][ C0] ? hsr_dev_open+0x380/0x380 [ 346.047362][ C0] ? msleep_interruptible+0x150/0x150 [ 346.052722][ C0] ? run_timer_softirq+0x6ae/0x17f0 [ 346.058607][ C0] ? trace_hardirqs_on+0x67/0x240 [ 346.063630][ C0] ? __kasan_check_read+0x11/0x20 [ 346.068641][ C0] ? hsr_dev_open+0x380/0x380 [ 346.073311][ C0] ? hsr_dev_open+0x380/0x380 [ 346.077981][ C0] run_timer_softirq+0x6c0/0x17f0 [ 346.083004][ C0] ? add_timer+0x930/0x930 [ 346.087419][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 346.093568][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 346.099107][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 346.105079][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.111311][ C0] __do_softirq+0x262/0x98c [ 346.115804][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 346.120655][ C0] irq_exit+0x19b/0x1e0 [ 346.124800][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 346.130336][ C0] apic_timer_interrupt+0xf/0x20 [ 346.135256][ C0] [ 346.138184][ C0] RIP: 0033:0x41debf [ 346.142087][ C0] Code: b6 0b 49 89 ca 44 89 c1 41 d3 e9 48 83 ff 08 74 0b 41 0f ba e1 04 0f 83 db 00 00 00 41 0f ba e1 00 73 b1 4c 8d 0c 37 4d 8b 09 <4d> 85 c9 74 a5 4c 39 c8 77 a0 49 39 d1 73 9b 4d 89 cb 49 29 f1 4d [ 346.161681][ C0] RSP: 002b:000000c42013fe80 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 346.170096][ C0] RAX: 000000c420000000 RBX: 000000c41f9e0791 RCX: 0000000000000000 [ 346.178056][ C0] RDX: 000000c43d6e0000 RSI: 000000c42c3f0dc0 RDI: 0000000000000000 [ 346.186016][ C0] RBP: 000000c42013ff18 R08: 0000000000000000 R09: 0000000000c1aae0 [ 346.193976][ C0] R10: 0000000000000020 R11: 000000c425c9ffb8 R12: 0000000000000000 [ 346.201936][ C0] R13: 0000000000000020 R14: 0000000000000013 R15: 000000c43d291bb8