783.472333][ T20] usb 6-1: Product: syz [ 783.477061][ T20] usb 6-1: Manufacturer: syz [ 783.503437][ T20] usb 6-1: SerialNumber: syz [ 783.560172][ T20] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 784.148847][ T20] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 11:05:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1f, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000000840)=""/88, 0x1ff, 0x0, 0x1, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000003c0)={0x0, 0x70, 0x0, 0x8, 0x2, 0x0, 0x0, 0x2, 0x40005, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x6, 0x6}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) fork() 11:05:27 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x60000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2648a, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:27 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x10, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x26) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000000)='attr/prev\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) gettid() ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) rt_sigqueueinfo(0xffffffffffffffff, 0x11, &(0x7f0000000040)={0xf, 0x3, 0xa4}) fork() [ 784.595722][T16777] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='jbd2_handle_extend\x00'}, 0x10) r4 = getpid() ptrace(0x11, r4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0xca, 0x4, 0x81, 0x1, 0x0, 0x1, 0x32100, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xf7f8, 0x5f46f73ccd3b04e4, @perf_config_ext={0xffffffffffffffc1, 0x3}, 0x4672bad077ea2429, 0xffffffff, 0x52af88b2, 0x4, 0xc2, 0x7f}, r2, 0xc, r3, 0xa) fork() fallocate(r3, 0x62, 0x3, 0x8001) r5 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x0, 0x8, 0x7, 0x3}]}, 0x10) 11:05:27 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x11, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 784.866497][T16829] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2648b, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 785.179039][ T20] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 785.188362][ T20] ath9k_htc: Failed to initialize the device [ 785.203628][ T9719] usb 6-1: USB disconnect, device number 18 [ 785.251579][ T9719] usb 6-1: ath9k_htc: USB layer deinitialized 11:05:28 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x77, 0x6, 0x4, 0x4, 0x0, 0x0, 0x401, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x4, 0x8, 0x2, 0x4, 0x4851, 0x401, 0x3}, r1, 0xb, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() 11:05:28 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x65580000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 785.466863][T16865] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 785.659349][ T9719] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 786.189081][ T9719] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 786.205673][ T9719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.226040][ T9719] usb 6-1: Product: syz [ 786.236733][ T9719] usb 6-1: Manufacturer: syz [ 786.248272][ T9719] usb 6-1: SerialNumber: syz 11:05:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x106) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 11:05:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1f, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000000840)=""/88, 0x1ff, 0x0, 0x1, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000003c0)={0x0, 0x70, 0x0, 0x8, 0x2, 0x0, 0x0, 0x2, 0x40005, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x6, 0x6}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fork() 11:05:29 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x18, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2648c, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:29 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x81000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = socket$inet(0x2, 0x800, 0xbe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x802, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000240)=0xc) sched_setscheduler(r6, 0x6, &(0x7f0000000080)=0xfff) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0)=0xffffffe1, 0x4) [ 786.360667][ T9719] usb 6-1: can't set config #1, error -71 [ 786.387731][ T9719] usb 6-1: USB disconnect, device number 19 [ 786.456904][T16960] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 786.613400][T16960] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2648d, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:29 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x60, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:29 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x88a8ffff, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 786.857829][T17078] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 786.968807][ T9719] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 787.209521][T17140] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 787.218629][ T9719] usb 6-1: Using ep0 maxpacket: 8 11:05:30 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x9effffff, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xaa041, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)={0x26, 0x37, 0x2, {0x1, 0x1, 0x3f, r3, 0x8, ']^-^],[]'}}, 0x26) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:05:30 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xf0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 787.349355][ T9719] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 787.390749][ T9719] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 787.425944][ T9719] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 787.490106][ T9719] usb 6-1: config 5 has no interface number 0 [ 787.498972][ T9719] usb 6-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 787.572403][ T9719] usb 6-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 787.604364][ T9719] usb 6-1: config 5 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 787.649688][ T9719] usb 6-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 787.673390][ T9719] usb 6-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 787.751463][ T9719] usb 6-1: config 5 interface 228 has no altsetting 0 [ 787.860056][ T9719] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 787.878473][ T9719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 787.901158][ T9719] usb 6-1: SerialNumber: syz [ 787.940375][T16990] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 787.959776][ T9719] hub 6-1:5.228: bad descriptor, ignoring hub [ 787.966434][ T9719] hub: probe of 6-1:5.228 failed with error -5 [ 788.255766][ T9719] usblp 6-1:5.228: usblp0: USB Bidirectional printer dev 20 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 788.608937][ T9719] usb 6-1: USB disconnect, device number 20 [ 788.654709][ T9719] usblp0: removed [ 789.179410][ T8] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 789.439009][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 789.630605][ T8] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 789.644858][ T8] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 789.662765][ T8] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 789.679567][ T8] usb 6-1: config 5 has no interface number 0 [ 789.686692][ T8] usb 6-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 789.712591][ T8] usb 6-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 11:05:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x400000, &(0x7f00000038c0)={0x0, 0x0, 0x4}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee9000/0x3000)=nil, 0x0, 0x0) syz_open_dev$video(0x0, 0x7, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/5, 0x20000, 0x1000, 0x1}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836010004b0e0301a4ce875f2e3ff5f163ee340b767950080f5ff000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$netlink(0x10, 0x3, 0xf) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x3a9d9000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x0, r3}, 0x10) recvmmsg(r0, &(0x7f0000003740), 0x0, 0x40000002, 0x0) 11:05:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2648e, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:32 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x300, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:32 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = getpgrp(r1) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0xcb, 0x25, 0x9d, 0x9, 0x0, 0xfffffffffffffff7, 0x21000, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x8000, 0x100000001}, 0x1, 0x80, 0x8, 0x6, 0x401, 0x1, 0x2a}, r2, 0x6, r0, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fork() 11:05:32 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0xf0ffffff, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1f, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000000840)=""/88, 0x1ff, 0x0, 0x1, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000003c0)={0x0, 0x70, 0x0, 0x8, 0x2, 0x0, 0x0, 0x2, 0x40005, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x6, 0x6}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fork() [ 789.732026][ T8] usb 6-1: config 5 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 789.777626][ T8] usb 6-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 789.839063][ T8] usb 6-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 789.844723][T17205] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 789.955601][ T8] usb 6-1: config 5 interface 228 has no altsetting 0 [ 790.039158][ T8] usb 6-1: string descriptor 0 read error: -71 [ 790.071534][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 790.128692][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 790.198853][ T8] usb 6-1: can't set config #5, error -71 [ 790.230067][ T8] usb 6-1: USB disconnect, device number 21 11:05:33 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x4, 0x57, {0x57, 0x22, "d15d40bf9a13991c6c1d46d2fe90e11c28a47e7467e3103cc4b4d06b99c2274d1a1cc9978fb22766c2ca4fa54a34bb0c8642f9955afbaf21e3d105324c9894e7e6124bc358cd8887698aa3505081e74ce82fff95f8"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f00000002c0)={0x20, 0xe, 0x70, "30532a03a20b5ec596c4e9fbfe316960cb4254c994065196572f88229d036fdb747d8077111a79bbd90ed6b3eea956dd1bb38c4225bfaad885f05b55f1290c4e120898c86fbce4fec1248107e202bfb337efa68f1e2b55483d972a3aedea64dd996e40be82fda17976facfcac52b842d"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0xfff, 0x6, 0xf3fb, 0x8, 0x3, 0x9, 0xff, 0x10001, 0x1ff, 0x9, 0x101, 0x4}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x20}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000280)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0xb6, &(0x7f00000001c0)="9ae33c5fd8b0c0eac100b89d5246d4f3636253df0301cd07f8f19702f96de786513124f71b342b592600474eb4ad3430cdac1cd836d1f8254827dc7d30a7b8db8fcaf9f0c3f7f15d77c5b419d96603b142c1438ac11dd7aebf4f92797f8dbe582df5d8cd3b6bbd172995f177878c0b4b0f49b371032d394319f54ad3def476f07c5471b5fe37bbf0616f30b84f19bff9bc945b28da411afc304dc22bc22647aee995adff09ce13be31290fbbed4208bea064404a8847") 11:05:33 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x500, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:33 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0xf1ffffff, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:33 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getnetconf={0x24, 0x52, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x81}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file0', [{0x20, '['}, {0x20, '/dev/kvm\x00'}, {0x20, ']}'}, {}, {0x20, '/dev/kvm\x00'}], 0xa, "51734f876b899966c401c8fccb14679d1cb8532f665c68ec661ee5e86be12cc622236f38d7d6613b254ee1de8a1ee675488a248fb443202afffb4d27d4e0d62a35f9dfabca3d85e3cbc2dc281d798ae953bb7f9ea05500a44d22091c8162a2205c41d19855df9a624cfc10d8d787345a8e6d83cdfa59d6e6cecaed14acea65014947c91bfafe4eabac6ff2d0d9f1dedf6f51445809ae96802bcd09b78a76a41f52233d6427c4a2cab8964af9007e83ed"}, 0xd5) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)=0x1) fork() r7 = epoll_create(0x7) sendfile(r7, r4, &(0x7f0000000040)=0x5, 0x1f) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 11:05:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2648f, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 790.588468][T17295] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:33 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x600, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:33 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0xfcffffff, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 790.716920][T17348] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 790.859147][ T8] usb 6-1: new high-speed USB device number 22 using dummy_hcd 11:05:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x26490, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:33 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0xfeffffff, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:33 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x700, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 791.048277][T17367] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 791.176416][T17421] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:33 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x900, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 791.270612][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.299047][ T8] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 791.313914][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.335113][ T8] usb 6-1: config 0 descriptor?? 11:05:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1f, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000000840)=""/88, 0x1ff, 0x0, 0x1, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000003c0)={0x0, 0x70, 0x0, 0x8, 0x2, 0x0, 0x0, 0x2, 0x40005, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x6, 0x6}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fork() [ 791.820454][ T8] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 791.846193][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0005/input/input10 [ 792.044610][ T8] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 792.588924][ C0] Mem-Info: [ 792.595134][ C0] active_anon:306 inactive_anon:373779 isolated_anon:0 [ 792.595134][ C0] active_file:8150 inactive_file:62002 isolated_file:0 [ 792.595134][ C0] unevictable:773 dirty:85 writeback:0 [ 792.595134][ C0] slab_reclaimable:17192 slab_unreclaimable:133606 [ 792.595134][ C0] mapped:61126 shmem:6177 pagetables:40215 bounce:0 [ 792.595134][ C0] free:856931 free_pcp:760 free_cma:0 [ 792.595262][ C0] Node 0 active_anon:1188kB inactive_anon:1419548kB active_file:32344kB inactive_file:208576kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:244492kB dirty:312kB writeback:0kB shmem:22480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1124352kB writeback_tmp:0kB kernel_stack:31904kB pagetables:85720kB all_unreclaimable? no [ 792.595357][ C0] Node 1 active_anon:36kB inactive_anon:75568kB active_file:256kB inactive_file:39432kB unevictable:1548kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:28kB writeback:0kB shmem:2228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:30464kB pagetables:75140kB all_unreclaimable? no [ 792.708791][ C0] Node 0 DMA free:10856kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:2408kB active_file:0kB inactive_file:52kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 792.708882][ C0] lowmem_reserve[]: 0 2651 2652 2652 2652 [ 792.708938][ C0] Node 0 DMA32 free:46680kB min:37764kB low:46692kB high:55620kB reserved_highatomic:0KB active_anon:1184kB inactive_anon:1416520kB active_file:32148kB inactive_file:208132kB unevictable:1544kB writepending:312kB present:3129332kB managed:2721636kB mlocked:8kB bounce:0kB free_pcp:1688kB local_pcp:588kB free_cma:0kB [ 792.709021][ C0] lowmem_reserve[]: 0 0 1 1 1 [ 792.709073][ C0] Node 0 Normal free:8kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:4kB inactive_anon:620kB active_file:196kB inactive_file:392kB unevictable:0kB writepending:0kB present:1048576kB managed:1220kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 792.709152][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 792.709205][ C0] Node 1 Normal free:3370084kB min:54168kB low:67708kB high:81248kB reserved_highatomic:0KB active_anon:36kB inactive_anon:75576kB active_file:256kB inactive_file:39432kB unevictable:1548kB writepending:28kB present:4194304kB managed:4117768kB mlocked:12kB bounce:0kB free_pcp:1360kB local_pcp:968kB free_cma:0kB [ 792.709294][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 792.709346][ C0] Node 0 DMA: 2*4kB (UM) 2*8kB (M) 1*16kB (M) 4*32kB (U) 3*64kB (UM) 0*128kB 1*256kB (U) 2*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 1*4096kB (E) = 10856kB [ 792.709689][ C0] Node 0 DMA32: 8*4kB (E) 33*8kB (UME) 213*16kB (ME) 367*32kB (UE) 244*64kB (UME) 68*128kB (UME) 11*256kB (UME) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 46680kB [ 792.709919][ C0] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 792.710082][ C0] Node 1 Normal: 89*4kB (UME) 434*8kB (UME) 81*16kB (UME) 6*32kB (UME) 3*64kB (UM) 3*128kB (UME) 1*256kB (U) 2*512kB (UE) 0*1024kB 2*2048kB (UE) 820*4096kB (M) = 3369988kB [ 792.710322][ C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 792.710345][ C0] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=4 hugepages_size=2048kB [ 792.710366][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 792.710388][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 792.710411][ C0] 46990 total pagecache pages [ 792.710421][ C0] 0 pages in swap cache [ 792.710429][ C0] Swap cache stats: add 0, delete 0, find 0/0 [ 792.710447][ C0] Free swap = 0kB [ 792.710456][ C0] Total swap = 0kB [ 792.710465][ C0] 2097051 pages RAM [ 792.710475][ C0] 0 pages HighMem/MovableOnly [ 792.710483][ C0] 382918 pages reserved [ 792.710491][ C0] 0 pages cma reserved [ 792.929180][ T9692] usb 6-1: USB disconnect, device number 22 [ 793.698772][ T20] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 794.059801][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.078743][ T20] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 794.100368][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.116984][ T20] usb 6-1: config 0 descriptor?? 11:05:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @multicast1, 0x1, 0x7, [@loopback, @multicast1, @multicast1, @empty, @loopback, @broadcast, @local]}, 0x2c) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}, @timestamp={0x8, 0xa}]}}}}}}}, 0x0) 11:05:37 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0xffffa888, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x26491, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:37 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xa00, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x41051, 0x8000, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x40, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:05:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1f, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000000840)=""/88, 0x1ff, 0x0, 0x1, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000003c0)={0x0, 0x70, 0x0, 0x8, 0x2, 0x0, 0x0, 0x2, 0x40005, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x6, 0x6}) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fork() [ 794.458981][ T20] usbhid 6-1:0.0: can't add hid device: -71 [ 794.459230][T17518] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 794.465431][ T20] usbhid: probe of 6-1:0.0 failed with error -71 [ 794.611769][T17516] debugfs: Directory '17516-4' with parent 'kvm' already present! [ 794.641867][ T20] usb 6-1: USB disconnect, device number 23 11:05:37 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}}, 0x0) r1 = getpid() r2 = gettid() gettid() ptrace$setopts(0x4206, r2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001840)={'ip6tnl0\x00', &(0x7f00000017c0)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x1, 0xa584, 0x62, @private1={0xfc, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x18}, 0x10, 0x80, 0x6, 0x44}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00200026bd7000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="e303000008fc03000a0003005bd6cee6f92a6d81da11251a7bba4df8dac4b9e5c5fe3d"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4044) tkill(r2, 0x33) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000002c0)={0x8, 0x8, {}, {0xffffffffffffffff}, 0x6, 0x7e66}) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x4, 0x7fc) sched_setscheduler(r1, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x810, r5, 0x529ea000) fork() [ 794.674188][T17565] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 11:05:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x26492, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:37 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xb00, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:37 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) mprotect(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(r1, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(r1, &(0x7f00008a7000/0x1000)=nil, 0x4000) shmat(r1, &(0x7f0000f4e000/0x3000)=nil, 0x4000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000780)={0x2, 0x4e23, @local}, 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/98, 0x62}, {&(0x7f0000000380)=""/232, 0xe8}, {&(0x7f0000000480)=""/110, 0x6e}, {0xfffffffffffffffe}, {&(0x7f0000000500)=""/152, 0x98}, {&(0x7f00000005c0)=""/253, 0xfd}], 0x6, 0x4, 0x8) readv(r2, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x31) set_mempolicy(0x0, &(0x7f0000000100)=0x401, 0x3) 11:05:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1f, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000000840)=""/88, 0x1ff, 0x0, 0x1, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000003c0)={0x0, 0x70, 0x0, 0x8, 0x2, 0x0, 0x0, 0x2, 0x40005, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x6, 0x6}) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fork() 11:05:37 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffff000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 795.031109][T17603] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x9) sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() [ 795.149840][T17651] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x2, 0x5}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x17, &(0x7f00000000c0)={0x1}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0x4) sendto$packet(r1, &(0x7f00000001c0)="ed02f149e7fe300644bc5dab40e1719f135765fc4af0019b173e3157bef650", 0x1f, 0x4000000, &(0x7f0000000200)={0x11, 0x1a, 0x0, 0x1, 0x9}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001d00)={'vcan0\x00', 0x0}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000040), &(0x7f00000002c0)=0x4) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000001d40)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x10003, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r6 = socket(0x28, 0x80004, 0x7fffffff) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0x27, 0x4, 0x4, 0x88}, {0x5, 0x0, 0x0, 0xf8}, {0x4, 0x6, 0xe2, 0xee2d}, {0x81, 0x2a, 0x4e, 0xa73b}, {0xfffb, 0x40, 0xb4}, {0x3, 0x8, 0x2, 0x4}]}, 0x10) r7 = accept4$unix(r3, &(0x7f0000000440), &(0x7f00000004c0)=0x6e, 0x80000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000500)) 11:05:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x26493, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:38 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xc00, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:38 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1f, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000000840)=""/88, 0x1ff, 0x0, 0x1, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000003c0)={0x0, 0x70, 0x0, 0x8, 0x2, 0x0, 0x0, 0x2, 0x40005, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x6, 0x6}) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fork() [ 795.612903][T17689] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:38 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f00000000c0)=0x8000) sched_setscheduler(r1, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() r3 = gettid() perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x1a, 0x80, 0x5, 0x3, 0x0, 0x6d, 0x1500, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x8008, 0x5, 0x6, 0x0, 0x0, 0x6, 0xb065}, r3, 0x8, r0, 0x13) 11:05:38 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0xffffff9e, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x26494, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:38 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xcab, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1f, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000000840)=""/88, 0x1ff, 0x0, 0x1, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000003c0)={0x0, 0x70, 0x0, 0x8, 0x2, 0x0, 0x0, 0x2, 0x40005, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x6, 0x6}) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fork() [ 796.115009][T17755] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 796.181395][T17754] debugfs: Directory '17754-4' with parent 'kvm' already present! 11:05:38 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffffff0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:39 executing program 3: pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0x6, 0x100000001, 0x16}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) ptrace$setopts(0x4200, r1, 0x1, 0x100030) ptrace(0x10, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7fff) fork() [ 796.346561][T17815] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:39 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f0000000b40)="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", 0xfe0}], 0x1, 0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000033c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x9, 0x0, 0x0) accept4(r2, &(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, &(0x7f0000000080)=0x80, 0x800) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000003480)=0xf946) r3 = getpid() fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x0, 0x3, 0x200000000ae, 0x80000001, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r5, 0x7, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}}, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x70, 0x0, 0x20, 0x6, 0x1, 0x0, 0x5, 0x80, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xa3, 0x2, @perf_config_ext={0x0, 0x9}, 0x20, 0x80000000, 0x101, 0x1, 0x5, 0x5607, 0xfffd}, r0, 0xb, r0, 0x0) dup2(0xffffffffffffffff, r7) 11:05:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x26495, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:39 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xe00, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:39 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffffff1, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 796.706127][T17880] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:39 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xf00, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 797.005565][T17933] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:39 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x41c3, 0xa0220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x402}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) chown(0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000507a57d6663a29ac793baa39f91", @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008001500000000000a0001000080c2000000000008000a00"], 0x50}}, 0x0) r0 = socket(0x27, 0xa, 0xffffffff) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 11:05:39 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000000)="4486a8dcf92dd17f9017563358d319b9b45105b2d13922eb661f2075847389ecf6894d871657cef8568b95612504c2c8f10dd2565aee8b4a004baba44a00555d625bedc1567c187d4ca8a4165ab54ffbecdd5cd7141cbb6d2f558234d25163ac544aff6e0f580ea4001230ef657227f7c1c2c6d923e9ed43176fcc5e0aa1d455e83f3b355a8843cd5e09b338a7399b650ff888e5d0a046bdbb773e4a0b365f4d7de97a489f7fc6a5", &(0x7f0000000600)=""/4096, &(0x7f00000000c0)="ab425014e29c25ccd84e61561764ea0a3a1fb4d93813cd7390e9c1d8665adc1396da4fda5a7c661f8384ea4ac63549359f9d9a4f576ae86dc7527acdfc947b276a9b5b22a8bd4c743799e350efb44576624ef8fd20c4b90db35eff299320d4e991ffde8ee75ba9387bccaa2744b5b5a400ecf5876cec73f3226fbeae3018c89598901b567585221bd830dc73c5255d3bf8d7722f8d80ba53", &(0x7f0000000180)="e7672ac4f1e59b42dbb0b7605150cd6108421dc1252a9751079e3528716ef6e832ba9cd2b0418adf75a394fc716752ba79233a02da7af16871d6c146badb667ea330e1bd6f95b76ed6a59d30595bb0d9b70394b796f176f18bfd10a0fd5910dc4edbbf43ce5fbfbba1c22cb19fa0028abdb254fb6d555612380c6d66dce1bf2f2060e218ffc4e15ee95e348d8edd2e764010f571e33aec8a40c5e5076e4baacc66c8cff2385cd49212f271cb411fee2fae7d32f1fe8b7e5043a7e7112dab38c97aa183556aec1c66e24d01d2e3c905fce3c3f0ec9d43ce567bd62cf17882a827c649b8f4f88d10f9620b0220fb0ef4b11ed3ac66de309e1bf2", 0x6, r0, 0x4}, 0x38) futex(&(0x7f0000000540), 0xb, 0x0, &(0x7f00000005c0), 0x0, 0x0) 11:05:40 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1100, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1f, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000000840)=""/88, 0x1ff, 0x0, 0x1, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000003c0)={0x0, 0x70, 0x0, 0x8, 0x2, 0x0, 0x0, 0x2, 0x40005, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x6, 0x6}) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fork() 11:05:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x26496, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:42 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:42 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:05:42 executing program 5: getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000031c0)=0x8) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000000}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c00)={'syz1\x00'}, 0x45c) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000100)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001100)={{0x0, 0x1ff, 0x0, 0x1, 0x1f, 0x0, 0xc4, 0xbee, 0x3, 0x8, 0x1, 0x8, 0x6, 0x4, 0xe8}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000021c0)={0x0, r2, "fa2664137c4aa89505ef40f255f5449fb3475605c63c7a2600f7772768ba12516c3ed960fdab5c661488d188010b0767cddc113f5ea400007cefff4a68651913ac67a532ba53c44ba2fd442c0ba27e56ebfea700d4434c2aef39c71b3888132dcbb9a2d28707670f005171eaf7d97dc6809e3157b513297ebc65e86ceb6a4142cdd4c8bb3a2d1a5a68cf56e10a492c381cb3e523ae7815916f5f58794b545ba093677a6db1696a183d0c3dd3840d34096310ec10037c1b445747bf14087be27fd0f950020f2b2324b86ab4de584050d2c0dc9af97bd7e07607bd7b70b2a8542e1bbdf05ec6832df9dd768345abb3e9dedeed0ad36cea0a0bcf6dac9b487fb42b", "553cb19f42e68f5030060bc0c934f3fe56b37045a596458d7cf252efa4748464511a1d2ffb284cebb983a425a72997a28849e11cac2d325d968a4c568d77a2738ab6c2886c83920ada81a6a13ed7c86cf8b328ff27e6bb912d8530c4cf4430ce191a9c3651ba132dad26f2540b1ef27de3ca10933dcbb2e8135b250161ba26dcdc4479172d48aa1ae1bbedf48e516b0d55f174edb94e0a57efe4677f56eeec11f39da8c4eb73efc7f5a22f72a0c9baaa4804fa8804101625344f4968932d70cd4f12afdc97c28ddcbcb3d1730de296f6309496c705d705973c58597bcd86acd3059ac8990062a1f97659068e0f49e4fe1a3cfc304029219c6fe676f7ea1778a93f1485f3e61a89bc05913f47cf23d9104257dd09b95656e08429c0563694801f66a4837dcea8a42537be3e8740b21ee172d1a0beee7255b7038996628c37e2a3a7a44d91108a2f968ec56db9cb171f2d841a9034581b31316893c4a39c653bdce8425bbe041726ade722cacf78169b36955594c33748313a95683943c049f7527b8e2677a8c69c3ae91f638cce3ecb653b804479941d47f48247d401a0f6f69dc8a9b6c090b79236629262be6b5596ece537e9d3b4253b0bff7eb65d3d596b8c31506c0a885582001c0ecd0fe9325ec782623b2e99fdaafac826f41441e1aa51315daff130d42de7a285849297806bd0817db05a0860bb1b44cbb4a62277c452af83a7146e4d66f5207d1a805afa0389adbb2fca4a2ed99dc58173be17c874dc1f6e7a01c2240a3539c47a9317122f7a9a3e84fa848c2414d8df126ca2fea37da7f5fe9a9c65f69a63b77375417942b60f91ae58617e37cbde0d7a982c72bc746935b9d21ae86c613873548ed88f639290598801544aa4a39f39126f44fc7bec50b28490eb8434ebbd3a8ee16c58eb7f9c5caad2a4da2332c43676f00470b1551bfe08b1fc2727227629e912d86962ee50f1a8dea64b49bfbc925631039c23b006826e3b8dc752e932f1d2c17b2fd74f5642e3a9d53a3d965b420f2eca0f0f3a0cfc7a697743178cb5b61a8366acef0043a54b68403a2c1ccb0a05da8183925f6d2a429bcdf827b0bd743d5570dc210d56aa0bab2584739b446ae5aeadcbc8529c5d98c78cd80b965097f481a0aebfa470b53580d8c8bc468d93404719c3e6351463d7855d26859b6dde6e21b587fcbdbaa3263fc3be026580daae5e8cba2381ca94849573ea3a3d5c1e5549bc0682ffcc463f732971c9f08bf9ca8a2259afca3613d656a9f870dc61ddc1532262ddeebdf1717302403b3874549c1a184ffb9323e9eebb5dd471b1f831ef4108239e3570ac3261cd2e588fb53acc857814464b31acb0adf5cdf830e28662ce489ed2b9059b45a584be02e7516b35930a738252dd7db98c6f727427b6bfcfde6c95744aba50750f87bf3899d38ab7bb795c49b8a9f965db1fd2708faf2ec870301770779657fef7c00803272e73d17aafdb69535dc3b49300a78490aa117acfe00c934ab5d88b31c437d3d3bc45ac35624bfff00120a7655506af5ecc1125d7c8849368b3c4bde0e61841ca66228590997ad9ac4161b8948d2ab322e29b5a08598f44d03dfa5ecfc44d8800bed0dc6c1231e3a16d4748019733a603b5068ce19d51d34909bb0e5be2ce0d48bc734a6451c5e085e3bc8c0dd9f8da9eefe8c9de945b050a24d2414f39959f4fbf72ca1cb3c597086a297f4d493990910309c9a515dba6d6a4baad04f89a70986af5f5a6cbc48a236b8a2c3029b8a9c022df4ca2ecf6f31eaf884f5e6793a5395d2cafd34f1eeb9048c3027236aee1aec3bc9d8f24dc4b9aa952d70b2668922c22055fcb0c53c777f904928bbf13f1351901354caa862bbf95416c8ace3d3ee0d3b93f44deef479f4730410274dcc38989d7c812e2524b43954d88e7a081237b69d1eca65b5ae30192f5608bd80ec9ff3ea477f56cba8730574d0cdd1900c6f78dc84908d321e2e02dd5c1eba8d0e3d998b3517d1ad1d55457a3c720c9537a3496f54da5a58386e8ade1406b8168697b272a9500ec4e839a290afc50ccdb5e5b789d475598b7dcd09fa968b43a74d2fb6e14bb872335c4644eaa9ca8bf13291b8ace94ebfec4a5dde97b1157fd6877d1762b481809a8b24815ddfe2e7165f11e14befa65f1e88917079e44ad32d8459d6b4d6db8f6ed535b3c7b24cfa08f3e97e9904215a36a287d475900cdd81f9975b384d4a869df0ccd133faa174ac1fb43a14e953fc02cd9083d4ecddcfc4265f5a0a298acd9523a02f0bd3fc8c1ac7697134192426f2b0af53cfb28a8ba1111d2a931421cbecbd27a5890ed2194dc35f8730f1e26d1d50de4f30ce00c859e91700807972a15666c98b8b80686227ba4a01e44e8b4c91ac2d774ff091c2779b24646bbcc162a39eb39ac6ac12684c332d09dacbb2e7ac5fac5fbe19e897a7ffe40f7d3a5a0e5dc8719cafe792c01c37591cc4b81cdb806d732ab96ab34db6616de2216b0313cd10eaf98f8d6f4250ab03345c0909adde92e9605a1ebd7274c04e007de9d8ec0f7f3aee949ee7e42d128040f3669207d8ef5be84bbc96e09302042a1b23557f04a40cd37f55ef86848b7036aa92ba06cf40278583f6fd4d0f4811d23eef18135b34a88918cac3470a17cc2215075e7cac4e383c5f22f7577a35b3954b0d0b71ebac6b44714064e114c3e33d809fd4f708642cb7feb1cad3586124ffaa85cc9adfc95a3266096ae4ac37f6429484b751a5c06b3c8fabb7b62e6052e77e757ca06155d5825fde7a99e4af41b17336128700e3a7e2f0df69a344dc2707415a128e901f6521207bfb88940778b0940dc79c2c7bdb4ef8ce921fce59c0d441dc89b9f8e5b2fd573b77587569aadd46fbc55b5c3b9bb90d963585c8e85d85edac07ce8618457a001f1b7b386a77d7d4e3335469dc8925751fd28f215cd9619cbbd8d5642f3446821648882324caa10359d341b96282a48494c5b61df1a2e2eb3c135481e3d1855566de039c11396dc1d54e369bfca5227d63adf0cb53ee80f8f086cd51e1f1ffeeac2d005b63a44c996c5742247370d0e47e2df6eaac2f1b8adb1672e7d53550b2903676e30c9b49e8fe71df58605d2f1f33c93f1afb81f06c1f524c8555ef67007c37d28d87e186f0a29c6f6110a9a534da5a1bbaf1d9d4c5a501ff34289930e1c2f8b776a463580933c73fdf7e6ea5ef31444571ab18092a06bf1e02e60756df5120c9da185bb522dd292b66166cf2fde90deee399ce168a185e78ea0fc66265200e71b8e5f238419093b42e3267f393f8a6c37b1c69e5023ef1912cdb79290d07effeb68a79ae19a9976942e749fdb14553fee98116fc1c066da052946c1231f3d7166121360eebf4d9f1f77b542b9412e952c3da11a7479ac15da5d6db49b15547db135ba4e1e79af86fbcadca4dbc859cb0125f8dbf6feedb6bf63146f026c404a2826ad2c9be34d1d5b31f5ab947afed35bf04deda38f111dd0400f975f9e28ac346e72da6f7ca9c0e9abd824e8a07d3a208312d2c93fc24880bdc551ae5a9cb7eef9e3f5a649a9c0a5350e087f2bc964118ab940dedd5ce96f939a0c4af4a15f08d67fdac8dd16864de6e2286f297175f2a2cffda2aaf8d8a713ba8bcd16882f29e254b414cac9f6f5c91e2c741ced3535deffd3382642f33d38353887f8f714adae3cd0df2c9db1e1cf82a61e7af27be48875ebb7aa363805ef5e4a129389dc968946e6df7d161b9dbfe5d69a86789a00ecea723baf3b3601a3cf5543abf8e11bd4bb1f69a8aff2b3a2efc506993d47937fcbd319dc0606c8ee0f45c63f50dbfe4ed009119432094de78e5cb84fc8a12a4254dcdf5c19963c98494b02025b37946f872a0bf7727bdd9b92366d9a7e35627356826977e97ede08cbd60eab7182f15bc8db698fb4e58fb8cad39990390a61b0eb9ba357b1d73df98b193282923894db3e57cfc6fa527075668b008787930fc1f5859cbe02dfdbacdc523033a6994e70bb3e08cb70eee9b1ae0dd972b743df4680a10e64eabc387e5c2d49a3a7649f7b147f67759940ea2323932b9b3d4e2f5e2ecf714b1e7de04145f09c31868f1c6a43c819893cec9a6cbf8d29a3717816326aae876464a5bc9a260b289b6e94285f0f6e8c44ea7d1927230894ce183092e2730b4259c1c1c06a358095849829af3a19ad6eb2539b343d8deb591c7f3f7410bd91c9776f383393a8b17cf6c02fb33ea2439c2dfc380df1db038c30978875368afba3b70c4dd84b4f2e4bc2172f6a1dc275fb19fee449baada79f677772a8e936bfda57467348a327cd40d9db61300fdc867ff0750c0933a520943055ee29e2c8e2e7e1e4cb93800cc62a2834bc02819c6502457eeb8ab3d0c5f3ae6ec61c6043847eca14f1abaf035c68752aa53dc23c27ebb82590f24787dc591307b9ef59bbf25dc45e09d384306d88cdfb4625ae39f7ad87d16c64c269b5190da77832eb67e5721162e30054f78ca3b1d29b5a6ae77f79515b5a6edbc79a2716d0a37228334895ce3727b64f60aa018ce3c6decfb25238e00ba391431154fa87007db22526d157a4eb588a9287a07ee3f815c9baf69c0fe0930df8186a4337f490c11b9db0ddf2d763fddbdc461fae8512b35c3055f3a452aac0efc71055c7890aabae36f1db510220c6d2580073e6ef4375c179f247530d61935bd600e01c097b05a485ecbce39887b2a5527fa822ef68ea5db00cd3d9595cc16626b77a60a85e9630590305ddebc45cf4568adf7164305f22e53cac1432afa3a976839deda27f8b56285ee07f9c8f638a7e60b95eeb4c9b942db18bb85717cf7e3a1031f510610a071b34d6b5b067ad1841159ae8bfa6f6e9ee2a6fb1e2004c94af62d0ff5af5b2e2db0bf6e3630d94d9cb09103dcf7a701e87a89bbd2e0e214bdae38c463fda13250d9f249d565debe4d733ad8580171ce7f5ed3f5b949186c44a20b043f05b0f4834697e01748650a81f2393dfa688b9212a0c3c22dd557d25ffe5dbeec7b5a495cf3c984d66146b2a2548a5da60b3bae5c8e35f8ea49d550360435a8f662fb7867e0bbcbfc345942703887cd7dd382e4347c888e9dfd095a380560bd9b978de20e7acaf8be6a6340cb554033d78d8c8b3f2ceff1fdbcf0d17a2fd2947e8d6d94858a416045aa6f847d144c477c804b09b32afddd0f5a899962f9ef4eab4d9757e5d0f986c9c23aa4f8b003a5a29cc648ba380361c339bf160e90608485686c3572c72a83ac5d4abfc980bcb46290032741f03f6ae09f400db60a8622345886ac9da7a055f1c38e2a67c476b5a418500c25e044cab6fc3c2ae4e8d4cbb2df94a084fdb6050bd7792dabcd7c361168bb6792fb3e2cf5ccef42c6fb94ba9af49fbe25572a10b5a050ccd85a9e7"}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)=ANY=[@ANYRES64=r5]) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r5}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000000c0)={0x0, r4, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000011c0)={r3, r4, "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", "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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x1) 11:05:42 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1800, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 799.537158][T18040] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:42 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x2000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:42 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x101100, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x0, 0x0, 0x20, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x100}, 0x0, 0x0, r0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) gettid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x200, 0x6, 0x3, 0x1}, {0x5ebc, 0xd3, 0x80, 0x6}, {0x6, 0x0, 0x81, 0x10000}, {0x2, 0x6, 0x2, 0x8}, {0x7fff, 0x0, 0x20, 0x2}, {0x7, 0x2b, 0x80, 0x70b091d9}]}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x2, 0xac, 0xaa, 0x8, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x0, 0x1}, 0x18090, 0x7c, 0x5, 0x7, 0x100000001, 0xff, 0x20}, r3, 0xb, r1, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fork() r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r7, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) 11:05:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x26497, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:42 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:42 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x5865, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 800.206690][T18105] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:43 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 801.215228][T18114] syz-executor.5 (18114): drop_caches: 2 [ 801.444558][T18039] syz-executor.5 (18039): drop_caches: 2 11:05:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1f, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000000840)=""/88, 0x1ff, 0x0, 0x1, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000003c0)={0x0, 0x70, 0x0, 0x8, 0x2, 0x0, 0x0, 0x2, 0x40005, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x6, 0x6}) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fork() 11:05:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x26498, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:46 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x6000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:46 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) dup2(r0, r1) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fork() 11:05:46 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 804.095130][T18176] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:46 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:46 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x6558, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffe01, 0x1d1400) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, r0, 0x0) r1 = getpid() r2 = getpid() sched_setscheduler(r1, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000240)=0xc) sched_setscheduler(r3, 0x5, &(0x7f0000000280)=0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) syz_open_procfs(r2, &(0x7f0000000100)='fd\x00') sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x80) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0xff, 0x4, 0x6, 0x78, 0x0, 0xffffffffffff8000, 0x212, 0xdb469cdc3028efb8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0xa12b, 0x3, 0x2, 0x7, 0x2, 0xff, 0x6}, r1, 0xe, r4, 0xf) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r0, 0xf81c6000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fork() [ 804.410638][T18225] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:47 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 804.681884][T18250] debugfs: Directory '18250-6' with parent 'kvm' already present! 11:05:47 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x8100, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:47 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x80000000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10003, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x20, 0x6, 0x4, 0x8, 0x0, 0x540, 0x400, 0x7, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x4804, 0x5, 0x3, 0x4, 0x5fcf, 0x5, 0x2}, r0, 0x1, r1, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000140)={0x1, 0x401}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fork() fcntl$getflags(r4, 0x1) 11:05:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x26499, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 804.966336][T18284] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 805.122811][T18326] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1f, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000000840)=""/88, 0x1ff, 0x0, 0x1, 0x0}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:05:49 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x5, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:49 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xab0c, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2649a, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x68) vmsplice(r2, &(0x7f0000002340)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000000080)="a16226e52686e6d7623f9c72827aa588f682b47f4e3cdf307627b1fd04d71489a8887718361d46eba6bf706934d2366d431959fc75df5ca8ac4597f67acf537a829e1a86c3e4d14ab34ab050199631d8770ee2a50b0127360380fd17b3852bb72af5b57b9f1216e14bfb005bf32ac9c939c1c1b160f3876b6fcd89f2744daf5ee3b8e018d95cf09ab51c6577b122deaa28d3c0f39decfebc171425cd53de3e0aca75f8f2a79cfb9d98841be50b9913d44b38b682a037843b7af26c75e7d0507939d3a4e8e2fb934948f1d714b3", 0xcd}, {&(0x7f0000002240)="7e9bfa590686fe99229ef3a240108bd0b4c63324087e7c32fff96c7b30fdcb2a62debb41038e0e55e93f60f62074c89076dfc9da80cba692ddc70682ea7e050e8a08e4bba4f5d05fd135003b389b0c55df9517118af379490c1725ae0b8b02f7adf8f6d77dba525552f5a530d3bb1675fad248add5cce9ecdf181fe1d5a23d5c535c7594f469fc9c1d67749b82d27da798be90d51cd616ba5c42cba2f19f98d877fe04c24456be7e745ddeb4525a8d89cd1a0e83b54e151a59ba090c5d7d3c91747a9cb1df6af4ec31ecfb119abdb3de9ebb82e660dc3105901305cf08", 0xdd}], 0x4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f00000023c0)={0x2, 0x70, 0x20, 0x3, 0x9, 0x7f, 0x0, 0x9, 0x40090, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000002380), 0x5}, 0x0, 0x1, 0x8, 0x9, 0x0, 0x100, 0x5}, 0x0, 0xb, r3, 0x2) 11:05:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f0000b1000000000000000000000000feffffff010000000500000009000000003400000000106cf4aa4ac99e8d0000fdff6c6f000000000000000000000000000162010059da58cf980000000010000010010000000000000000000001a85f001a4b81692ef300000005000000aaaaaaaaa9ffe9020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d0000000000000000f4"]}, 0x1a8) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'bridge0\x00'}}, 0x1e) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000004ee40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000004fe40)={{0x0, 0x7fff, 0x7, 0x7fff, 0x2, 0x7, 0xffffffffffffff85, 0x400, 0x0, 0x7fffffff, 0x6, 0x5, 0xff, 0x8, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)=ANY=[@ANYRES64=r6]) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r6}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004ff00)={0x200, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {r3}, {0x0, r7}], 0xe8, "9fff92383e8cdd"}) close(0xffffffffffffffff) [ 806.852840][T18344] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 807.160701][T18392] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:50 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x204100, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f01c2b9800000c00f3235010000000f306d5e6a0f260fc7322e36ec0f323e260f0093ff3977e366baf80cb828929d8eef66bafc0c66ed", 0x37}], 0x1, 0x44, &(0x7f0000000100)=[@cstype0={0x4, 0x1}, @cstype3={0x5, 0x2}], 0x2) fork() 11:05:50 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x6, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:50 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xf000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2649b, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'bridge0\x00'}}, 0x1e) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000004ee40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000004fe40)={{0x0, 0x7fff, 0x7, 0x7fff, 0x2, 0x7, 0xffffffffffffff85, 0x400, 0x0, 0x7fffffff, 0x6, 0x5, 0xff, 0x8, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)=ANY=[@ANYRES64=r6]) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r6}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004ff00)={0x200, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {r3}, {0x0, r7}], 0xe8, "9fff92383e8cdd"}) close(0xffffffffffffffff) [ 807.730910][T18415] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 807.880344][T18451] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:50 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x34000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 808.492133][ T3240] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.498519][ T3240] ieee802154 phy1 wpan1: encryption failed: -22 11:05:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1f, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000000840)=""/88, 0x1ff, 0x0, 0x1, 0x0}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:05:51 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x7, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2649c, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:51 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x40000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:51 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x8de8], 0x1, 0x80000}) write$usbip_server(0xffffffffffffffff, &(0x7f0000000240)=@ret_submit={{0x3, 0x5, 0x0, 0x1, 0x10000}, 0x6, 0xe3, 0x2, 0x196, 0x1, 0x0, "602d679c7d133b821344204cde1081e15934738e117e25d9e4db6199480e758cbea1cdd16e7c2f4da1f4cba5bce5f1ce2bbb0663fcb7e7d2e610223c1eecc20eca82de0ef14df1ffab73f4ca6bb19f9425fa1e4c179b02d282478ff9d8698876720c82b933a2be7bae5bdf7120b43c98ddc83b62d10a49a3765882793fa75de93c9e43fc5caca7b97440d5c1a6c9c416ecd33d495847dbf97688a42ee8eb08c168614138e353149044bb39a1fdc3a004b0fe4649820f3e090dfdf79819c2a2122ec4c5a205e1a91bc04195f73e20a13e509ba8ff072f86763182fed0a3768b8ded555f", [{0xf4, 0x7, 0x8, 0x3ff}, {0x2c13, 0x1, 0x7fff, 0x81}, {0x1, 0x1, 0x8, 0x73d2}, {0x41, 0x424964b4, 0xffffffff, 0x8}, {0x9, 0x5, 0x10000, 0x7}, {0x4e, 0xcd80, 0x3, 0x2}, {0x200, 0x7f, 0xffff7fff, 0x4}, {0x81, 0x3, 0x9, 0x6579ddd9}, {0x10001, 0x9, 0x9, 0xeb8e}, {0x81, 0x5, 0xb7a, 0xffff}, {0x3, 0xfab, 0x2, 0x20}, {0xffff40ef, 0xf4c3, 0x4, 0x80}, {0x3, 0x0, 0x5, 0x80}, {0x9, 0x5, 0x8001}, {0x4, 0xd6, 0xf8}, {0xfffffffd, 0x5, 0x6, 0xffff3641}, {0x7fffffff, 0x7, 0x8000, 0x20}, {0x100, 0x7, 0x3}, {0x4, 0xffffffe1, 0x4, 0xfa6}, {0x1f, 0xfffffffa, 0x8, 0x6}, {0x2, 0x2, 0xf6, 0x8}, {0x3, 0x3e, 0x8cf4, 0x8}, {0x5075, 0x3, 0xffffffff, 0x1}, {0x1, 0x6, 0x101, 0xffff}, {0x1000, 0x0, 0x6f, 0x91c}, {0xe12, 0x421b, 0xfffffffc, 0x80000001}, {0xffffffc0, 0x0, 0xffff}, {0x8, 0x101, 0x585, 0x7}, {0x7, 0x100, 0x80000000, 0x8}, {0x6, 0x9, 0x7ff, 0x8}, {0xffff, 0x1, 0x4, 0x3}, {0x401, 0x7, 0x7fff, 0xd11}, {0xff, 0x3, 0x22e, 0xff}, {0x8, 0x6, 0x7, 0x3}, {0x7f, 0x6, 0x0, 0x9}, {0x3f, 0x3, 0x27, 0xff}, {0x5, 0x0, 0x8001, 0xf842}, {0x2, 0x7, 0x8, 0x101}, {0x3, 0x7fff, 0x6, 0xfffff000}, {0x80, 0x4, 0xd0, 0x5}, {0x689, 0x2, 0x1, 0x8}, {0xff, 0x7, 0x7ff, 0x1ff}, {0xff, 0x80, 0x5, 0x401}, {0x9f, 0x8001, 0x200, 0x9}, {0x0, 0x5, 0x8c, 0x2}, {0x5eb36036, 0x6, 0x8, 0x7}, {0x2, 0x5, 0x1, 0x9}, {0xb82, 0x2, 0x7, 0x1}, {0x82d0, 0x5b, 0x2, 0x4}, {0x7, 0x2, 0x6, 0x200}, {0x4, 0x5, 0x2, 0xd218}, {0x401, 0x40, 0x4, 0xff}, {0x9830, 0x5, 0x6, 0x63}, {0x200, 0x84, 0x200, 0xde}, {0x7, 0x7fff, 0x38e9c35d, 0x7}, {0x5, 0x7}, {0x1, 0x5, 0x17, 0xd4}, {0x1000, 0xfffffffd, 0x9}, {0x4aee, 0x616bacbf, 0x8, 0x1}, {0x7, 0xff, 0x9, 0x4}, {0x7, 0x5, 0x0, 0x1000}, {0x12, 0xfffffffb, 0x10001, 0x101}, {0x3, 0xffff, 0x2, 0x720}, {0x6, 0x7, 0xfffffffb, 0x8001}, {0x22, 0x80, 0x2, 0x1000}, {0x7, 0x2, 0xc974, 0x6}, {0x3, 0xffffff25, 0xb243, 0x3}, {0x200, 0x8, 0x2, 0x5}, {0x1, 0x1, 0x3}, {0xd29f, 0x6, 0x8}, {0x799fa360, 0xfffffff7, 0x7, 0x100}, {0x76, 0x0, 0xff, 0x5}, {0x401, 0x3, 0x6, 0x5}, {0x28b0, 0x8001, 0x3, 0x1}, {0x1f, 0xdeb, 0x7fffffff, 0x6}, {0xabf, 0x772e6600, 0xfffffffa, 0x6}, {0x9, 0x6, 0x1, 0x9}, {0x7, 0x81, 0x1, 0x3ff}, {0x5, 0x2b5d, 0x2, 0x2}, {0x3, 0x1ff, 0x3, 0x8}, {0xfffffffc, 0x24, 0x100, 0x8}, {0x6, 0x245576d1, 0x8, 0x8001}, {0x9, 0x8, 0x7f, 0x1}, {0x5, 0x4, 0xebe, 0xeed}, {0x9, 0xfffffffe, 0x10001, 0xfffffff9}, {0x8, 0x2, 0x55e, 0xf36}, {0x8, 0xffffff81, 0xffff, 0xfff}, {0x1, 0xffffb0ca, 0x4, 0x800}, {0x400, 0x5, 0x8, 0xffffff13}, {0x9, 0x0, 0x3, 0x3}, {0x7fffffff, 0x4, 0x80000000, 0x352}, {0xffffffff, 0x6, 0x6, 0x8001}, {0x9, 0x3f, 0x3ff, 0x9}, {0x9, 0x4, 0x1, 0x4}, {0x10000, 0x800, 0x8b84, 0x1}, {0xffffffff, 0x5, 0x100, 0x661f}, {0xf8d, 0x4, 0x9, 0x84ef}, {0x1, 0x0, 0x9, 0x4}, {0x6f, 0x7, 0x8, 0x48f9}, {0x7, 0x9, 0x2, 0x400}, {0x2b99e6df, 0x0, 0x7fffffff, 0x40}, {0x9, 0x4, 0x8000, 0x1}, {0xfffffffd, 0x4, 0x0, 0x9}, {0x5, 0x6, 0x4, 0x3}, {0x7f, 0x7, 0x1a54, 0x6c8}, {0x8, 0x3, 0x10000}, {0x9d, 0x7, 0x80000000, 0x2d4}, {0x4d, 0x4, 0x0, 0x5}, {0x1, 0x0, 0x5, 0x9}, {0x2, 0x10000, 0x1, 0x9}, {0xe60b, 0xfffffffb, 0xf, 0x20}, {0x1, 0x20, 0x4, 0x7}, {0x9, 0x8, 0x4d1b, 0x10001}, {0x5, 0x6, 0x4, 0x5}, {0x7, 0x8, 0x3, 0x5}, {0x8, 0x5, 0x3, 0x7}, {0xbaa5, 0x4, 0xfc, 0x10001}, {0x5, 0x2, 0xeeb8, 0x7f}, {0xfffffffb, 0x2ad52fc, 0xffffffff, 0xb2}, {0x3ff, 0x0, 0x20, 0xfffffffa}, {0x3, 0x1, 0xa2, 0x401}, {0x3, 0xbc8, 0xfbc2, 0x80000000}, {0x10001, 0x9, 0x1, 0x3}, {0x92f7, 0xea1e, 0x8, 0x20}, {0x8000, 0x6, 0x401, 0x80000000}, {0x6, 0x2, 0x8000, 0x7c16}, {0x6, 0x0, 0x0, 0x8}, {0x101, 0x7fffffff, 0x9, 0x5}, {0xea, 0x9, 0x3f, 0xa9}, {0x6, 0x1, 0x8001, 0xd9}, {0x800, 0x41c, 0xec000, 0x2}, {0x2, 0x1d3, 0x7, 0x1b}, {0xffffffe0, 0x80000000, 0x101, 0x800}, {0x6, 0x9eb, 0x7fff, 0x5}, {0xffff, 0xffffffca, 0x3227, 0x7f}, {0x3, 0x8001, 0x3, 0x7fffffff}, {0x8, 0x0, 0x4, 0x6}, {0x984, 0x0, 0x40, 0xffffffff}, {0x20, 0x271a, 0x6, 0x9}, {0x4, 0x7fff, 0x1000, 0xa4a8}, {0x80, 0x98, 0x800, 0x1ff}, {0x7, 0x645, 0xfb0c, 0x7}, {0x0, 0x5, 0x1, 0x1ff}, {0x913, 0x0, 0x3}, {0x7f, 0x2, 0x3, 0x7}, {0x8d, 0x6, 0x7, 0x8}, {0xdb, 0xbbc, 0x7}, {0x8, 0x7, 0x6, 0xfffffff9}, {0x0, 0x1, 0x7fffffff, 0x100}, {0x120, 0xfffffffb, 0xffffff7f}, {0x4, 0x7}, {0xfff, 0x7f, 0x6b, 0x3}, {0x4, 0x2, 0x8, 0x7fffffff}, {0x8e8, 0xffffffff, 0xff, 0xfa23}, {0x0, 0x0, 0x0, 0xfffff232}, {0x8, 0x80000001, 0x1ff, 0x5}, {0x6, 0x81, 0x0, 0x4f01}, {0x9, 0x8, 0x97a, 0x9}, {0x8, 0xff, 0xe41c, 0x6}, {0x81, 0x6, 0x4, 0x6}, {0x7fffffff, 0x7ed, 0xa6db, 0x2}, {0x7, 0x317, 0x80000001, 0x1}, {0x8, 0x8, 0x7, 0x6}, {0xfffff000, 0x5, 0x9}, {0x5, 0x8, 0x80000001, 0x100}, {0x7, 0x4, 0x8, 0x80000000}, {0xffff, 0x100, 0xffff0605, 0x4}, {0xf6, 0x3, 0x10000, 0xfffffffd}, {0x1a, 0x101, 0x80000000, 0x1000}, {0x2, 0x9, 0x0, 0x7}, {0x0, 0xfff, 0x81, 0xf16}, {0x10001, 0x10001, 0x1000, 0x7}, {0xb692, 0x5, 0xfffffeff, 0x1}, {0xfffeffff, 0x2, 0x1, 0x1f}, {0x8, 0x3ff, 0x800, 0x7f}, {0x101, 0x7, 0x5, 0x8}, {0x6, 0x6, 0x8001, 0xfffffc01}, {0x8001, 0xd855, 0x7, 0x81}, {0x3, 0x8, 0x3, 0x9}, {0x0, 0x3ff, 0x7, 0x9}, {0x401, 0x6c, 0x0, 0x1f}, {0x3e, 0x6, 0x6, 0x7bf}, {0x8, 0x1, 0x2}, {0x3, 0x7, 0x9, 0x100}, {0x3ff, 0xd8ee, 0x100000, 0x1}, {0x92, 0x24c000, 0x6, 0x8}, {0x3, 0x5dc, 0x2, 0x6}, {0x1, 0x2, 0xffffff00, 0xa8f}, {0x0, 0x8, 0x8001, 0x1}, {0x0, 0x3, 0x63f11f55, 0x2}, {0x2, 0x1000, 0x3, 0xc1}, {0x1, 0x2, 0x3, 0x6}, {0x6, 0x6, 0x4, 0x8}, {0xe216, 0x7, 0x61949690, 0x101}, {0x36, 0x230, 0x7, 0xfffffffa}, {0x5, 0x7, 0x1, 0x100}, {0x8, 0x8, 0x3f, 0xfffffffa}, {0x20, 0x7, 0xfffffff9, 0x1}, {0x1, 0x6b2, 0x2, 0x9}, {0x3ff, 0xfffffffa, 0x6, 0x1100}, {0x8, 0x5, 0x5, 0x4d58}, {0x55, 0x80000000, 0x1, 0x3}, {0xffffc01c, 0x4, 0x81, 0x2}, {0x0, 0x8000, 0x6, 0x4}, {0x5, 0x3, 0x9, 0x938}, {0x3, 0x3, 0x8001, 0x40}, {0xfff, 0x3, 0x1}, {0xe000000, 0x100, 0x7, 0x5f88}, {0xffffffff, 0x2, 0x7, 0x7}, {0x3, 0x10000, 0x2}, {0x7, 0x7, 0x8000, 0xffffff80}, {0x7f, 0xce5, 0xc4, 0x2}, {0x42, 0x8000, 0x8, 0x401}, {0x8, 0x5, 0x44, 0x9}, {0x6, 0x3, 0x7}, {0x29, 0x9, 0x9, 0x3}, {0x92e, 0x7, 0x8, 0x3}, {0x8, 0x60000, 0x80000001, 0x1}, {0x9, 0x7f, 0x0, 0x80000001}, {0x401, 0x2, 0x1, 0xde8}, {0x1f, 0x6, 0x0, 0x1}, {0x100, 0xf6a0, 0x1, 0xba}, {0x6, 0x4, 0x401, 0x7}, {0x3, 0xa8, 0x4, 0x9}, {0xdf79, 0x7fffffff, 0x0, 0xfffffffb}, {0x484, 0x10000, 0x2b5, 0x1}, {0x6ee1, 0x28000000, 0x0, 0x9}, {0x7fff, 0x5, 0xfffffffe, 0x241}, {0x1ea, 0x1, 0xbd9, 0x5}, {0x8, 0x6a1, 0x1ff, 0x3ff}, {0x1, 0x353c, 0x80000000, 0x8}, {0x6, 0x0, 0x3, 0x10001}, {0x0, 0x2, 0x0, 0x400}, {0x1, 0x9, 0xffffffff, 0x1f}, {0x9, 0x2, 0xff, 0x8}, {0x2, 0x8, 0x2, 0x20}, {0x2, 0xffffffa5, 0x5c9}, {0x5, 0xfffffffb, 0x0, 0x8}, {0x0, 0x7, 0x6, 0xffffff53}, {0x80000000, 0x292, 0x3ff, 0x4}, {0x3, 0x5, 0x94, 0x101}, {0xfffff9fe, 0x1000, 0x20}, {0xfffffffb, 0x7, 0x9, 0x100}, {0xff, 0x7f, 0x100, 0x4}, {0x955c, 0x2, 0x7fff}, {0xc3f00000, 0x9, 0x6, 0x3}, {0x7, 0x5, 0x81, 0x3}, {0x10000, 0x7, 0x10000, 0x80}, {0x3f, 0x5e, 0x2, 0x8}, {0x7, 0x400, 0x726, 0x2}, {0x5, 0x5d6, 0x7, 0x3}, {0x3, 0x8000, 0x80000001, 0x100}, {0x4, 0x6, 0x80000000, 0x100}, {0x1, 0x7f, 0x101, 0xfff}, {0x4e033cd8, 0x4, 0x9013, 0xcf}, {0x2, 0x1f, 0x8, 0x3}, {0x7, 0xffffffff, 0x80, 0x40}, {0xc3f7, 0xff, 0x8000}, {0x0, 0x4, 0x7, 0x7}, {0x4, 0x10001, 0x40, 0x11ba}, {0x1, 0x7fffffff, 0x5, 0x4}, {0x7, 0x6, 0x0, 0x2}, {0xffff, 0xfffffff9, 0x937d, 0xffffff71}, {0x805, 0x6, 0xfffeffff, 0x5}, {0xffffff2f, 0x6, 0x80, 0x400}, {0x0, 0x200, 0x7ff, 0xfffffffe}, {0x3, 0x4, 0x1, 0x7fffffff}, {0xff0, 0x6, 0x1f}, {0x4, 0xfffffff9, 0x101, 0x8}, {0x1000, 0x10001, 0x7fff, 0x800000}, {0x9, 0x8, 0x0, 0x10000}, {0x7, 0x22, 0x8000, 0xcd7e}, {0xf8, 0x5, 0x0, 0x716}, {0x800, 0xff, 0x7, 0x6}, {0x800000, 0x63, 0x10000, 0x8001}, {0xffff, 0xa0d, 0x8, 0x2}, {0xfffffffa, 0x7fff, 0x7, 0x401}, {0xffff, 0x3, 0x8, 0x7}, {0x1c5, 0x6, 0x1000, 0xffffffff}, {0x6, 0xff, 0xf4, 0x3ff}, {0x8001, 0xe4, 0x0, 0x8}, {0x8, 0x6, 0x1, 0x7}, {0x9, 0x0, 0x2, 0x4}, {0x8, 0x5, 0x1, 0xa38}, {0x100, 0xffff, 0x7, 0x6073}, {0x5, 0x9, 0x1, 0x9}, {0x81, 0x3, 0x3, 0x8}, {0x8000, 0x8001, 0x200, 0x40}, {0x8, 0x10001, 0x9, 0x6}, {0x6, 0x9, 0x1ff, 0x2b0c}, {0x8, 0x30000, 0x7fffffff, 0x9}, {0x9, 0x9f, 0x6, 0x9}, {0x0, 0x9}, {0x7, 0xfffff4f8, 0xff, 0x3}, {0x2, 0x0, 0x4, 0x9}, {0xffffffff, 0x4, 0x800}, {0x2, 0x8, 0x8, 0x4}, {0xb22, 0x5, 0x8001, 0x6}, {0x5, 0xfff, 0x80000000, 0x7}, {0x8, 0x0, 0x45c9, 0x7}, {0x1, 0x0, 0x4a3, 0x18}, {0x8, 0x6a, 0xc853, 0x3ff}, {0xfff, 0x7, 0x401, 0x7fffffff}, {0xffffffff, 0x10001, 0x800, 0x8}, {0xffffffff, 0x40, 0x7, 0x9}, {0x101, 0x5, 0xd2, 0x8}, {0x41cc, 0x2, 0x9, 0x47dc6733}, {0x1, 0x2, 0x80, 0x3}, {0x1c0a, 0x9, 0x1, 0xfffffffe}, {0x6c2, 0xfffffff7, 0x9, 0x1}, {0xfb6, 0x5, 0x2, 0x3f}, {0x1, 0x6, 0x4, 0x3}, {0x81, 0x9, 0xf8, 0xfffffffb}, {0x1, 0x3ff, 0x6, 0xffffffff}, {0x1, 0x43, 0x6, 0xdd0}, {0x5, 0xbac, 0x7, 0x15}, {0x93a, 0x9, 0x1, 0xfd}, {0x800, 0x4, 0x0, 0x4}, {0x3, 0x0, 0x8, 0x5e}, {0x3, 0x3, 0xfff, 0x8ef1}, {0x1, 0xf689, 0x7, 0x40}, {0x80, 0x6, 0x0, 0xc51}, {0x5, 0x2, 0x1, 0x5}, {0x8, 0x7fff, 0x8000, 0x2}, {0x80, 0xe00000, 0x400, 0x100}, {0x7, 0x6, 0xfffffffa, 0x5}, {0x8, 0x8, 0x7515, 0x7}, {0x4, 0x8, 0xffff, 0x3}, {0x70, 0x3ff, 0x1e8c0a36, 0x400}, {0x7fffffff, 0x3ff, 0x9bd6, 0x9}, {0x7fff, 0x3f, 0x401, 0x6}, {0x5, 0x8000, 0x6, 0x4}, {0xac6, 0xd1d, 0x1, 0x1}, {0x1, 0x79b, 0x7, 0x7fff}, {0x4, 0x7ff, 0xfffffffa, 0x6}, {0xfffffffc, 0x0, 0xffffffff, 0x7f}, {0x3, 0x3f, 0x91f, 0x2}, {0x0, 0xa8, 0x3, 0x3304b2a2}, {0x1, 0x9, 0x0, 0x6}, {0x7dc, 0x68e7, 0x3, 0x9}, {0x1000, 0x2, 0x2, 0x3f}, {0x8a, 0x2, 0xfffffffa, 0xf8}, {0x0, 0x5, 0x9, 0x4}, {0x13, 0x1, 0xec, 0x7f}, {0x9, 0x88, 0x9, 0x531}, {0xe387, 0x58d5, 0x2, 0x4}, {0x8, 0x20, 0x200, 0x7fff}, {0x1, 0xffffff01, 0x2, 0x9}, {0x76d6, 0x2, 0xba7b, 0xfffffe01}, {0x85, 0x6}, {0xffff, 0x459, 0x0, 0x1}, {0x0, 0x5, 0x4, 0xffffffff}, {0x71, 0x1ff, 0x2, 0x3}, {0x40, 0x7, 0xfffffffe, 0x2}, {0x2, 0x7, 0x2, 0xa1c7}, {0x2, 0x8, 0x10000, 0x7}, {0x3, 0x10000, 0x80000000, 0xae2}, {0xa27, 0xb406, 0x400, 0x9}, {0x3f, 0x1, 0x5, 0xf33}, {0x3, 0x8000, 0xffff0000, 0x8}, {0x2, 0x9, 0x1000, 0x9d4e}, {0x9, 0x200, 0x40, 0x80}, {0x6, 0x5, 0x3, 0xf750}, {0xfff, 0x6, 0x1ff, 0x1000}, {0x80000000, 0x4, 0x9, 0x7}, {0x4, 0x8, 0x9, 0x101}, {0x1ff, 0x0, 0x9, 0x7ff}, {0x7ff, 0x6, 0x0, 0x1576}, {0x6, 0x3f, 0x5, 0x7}, {0x7, 0x101, 0x20, 0x5}, {0x5f61, 0x0, 0xcc, 0xfffffffc}, {0x1, 0x7, 0x7d1}, {0x7, 0x0, 0x4, 0x1}, {0x7, 0x1, 0x2, 0x99c}, {0x83, 0x580, 0x7fffffff, 0x1}, {0x8000, 0x9, 0x4, 0xb0a}, {0x1, 0x2, 0x20}, {0x0, 0x7, 0x4, 0x75}, {0x7ff, 0x4, 0x7ff, 0xc7}, {0x7ff, 0x1000, 0x4, 0x5}, {0xffffff00, 0x3, 0x1f, 0x5}, {0xb6c, 0x8, 0x101, 0x6}, {0x1, 0x1f, 0x60, 0x7}, {0xff, 0x8, 0x3, 0x8001}, {0x7ff, 0x2ff, 0x7}, {0x8, 0x80, 0x8}, {0x2, 0x800, 0x101, 0xffff}, {0x8, 0x80, 0x81, 0x7}, {0x7, 0x6, 0x7, 0xbde}, {0x4, 0x4000000, 0x80, 0x3}, {0xfffffff8, 0x7, 0x4, 0x9}, {0x3, 0x4, 0x3ff, 0x3f}, {0x100, 0x6, 0x1ff, 0x9}, {0xfffffffb, 0x1000, 0x8000, 0x17ec}, {0x7, 0x1, 0x4, 0xab2}, {0x3, 0x200, 0x4, 0x1}, {0x204, 0x88c5, 0x6f6, 0x64}, {0x80000001, 0x6, 0x4, 0x1}, {0x14000000, 0x2, 0x7f, 0x8001}, {0x6, 0x2, 0x8000, 0x1f}, {0x10000, 0xcfc, 0x1, 0x7}, {0x2, 0x0, 0x4, 0x2}, {0xffff, 0x5, 0x1, 0x5}, {0x3, 0x200, 0x4, 0x1}, {0x8001, 0xffffff21, 0x80000001, 0x4}, {0x8, 0x5, 0xfffffffa, 0x400}]}, 0x1a73) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:05:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f0000b1000000000000000000000000feffffff010000000500000009000000003400000000106cf4aa4ac99e8d0000fdff6c6f000000000000000000000000000162010059da58cf980000000010000010010000000000000000000001a85f001a4b81692ef300000005000000aaaaaaaaa9ffe9020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d0000000000000000f4"]}, 0x1a8) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'bridge0\x00'}}, 0x1e) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000004ee40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000004fe40)={{0x0, 0x7fff, 0x7, 0x7fff, 0x2, 0x7, 0xffffffffffffff85, 0x400, 0x0, 0x7fffffff, 0x6, 0x5, 0xff, 0x8, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)=ANY=[@ANYRES64=r6]) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r6}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004ff00)={0x200, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {r3}, {0x0, r7}], 0xe8, "9fff92383e8cdd"}) close(0xffffffffffffffff) [ 809.056456][T18485] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2649d, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:52 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x200000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:52 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x8, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 809.723499][T18536] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:52 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x6558, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:52 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x9, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:53 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x400300, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1f, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000000840)=""/88, 0x1ff, 0x0, 0x1, 0x0}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:05:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2649e, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:54 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xa, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:54 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) dup2(r0, r1) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fork() 11:05:54 executing program 3: pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x10003, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x80, 0x20, [], 0xda9739c6914af3b0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x40021}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fork() 11:05:54 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xf0ffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 811.876961][T18603] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 812.084477][T18654] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2649f, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:55 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:55 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 812.310154][T18668] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1f, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000000840)=""/88, 0x1ff, 0x0, 0x1, 0x0}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:05:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x5, 0x1, 0x81, 0x9, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x8, 0x7}, 0x4000, 0xb96, 0x6, 0x7, 0xfffffffffffffffe, 0x0, 0xfff}, r0, 0x3, 0xffffffffffffffff, 0x1) [ 812.474021][T18703] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:55 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:05:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264a0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:56 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x2000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) sched_setscheduler(r1, 0x3, &(0x7f0000000000)=0x81) sched_setscheduler(r0, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() 11:05:56 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 813.646856][T18743] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:56 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x3000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:56 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xf, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264a1, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r4 = dup(r2) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x7f, 0x1, 0xc0, 0x4, 0x0, 0x0, 0x20, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb4e4, 0x2, @perf_config_ext={0x6, 0x101}, 0x40, 0x9, 0x1, 0x7, 0x1, 0xff, 0x2}, r3, 0x6, r4, 0x8) [ 814.191657][T18795] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:58 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000000)='\xce\x15\xd2\\\xd2\xdc^\x002\xf0\x02\x97r\xd5B\xa1\x06\xf8Z\x01G-W0\xa5\xa9E\xefDU\xa4\xd4\xd45\xaa\xec\xafE\xe1\x95\x01\"=f\x8a.Xs\x91\xf5s\xa8D\x02\x85b\x8d\xcb~r\xdcN\xfb\xb6\x90\xc2\xc4\x14++\x11\xdb\xa3\xb2\xb5\x1eA\xa6Mc\xb7\xca\x0e\xc5\xea\xf0\x91\x9b\xb9\x1f\xda|\xf3\x90\xc7w\xe0\xfc\xd3<4\xa9') 11:05:58 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x4000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:58 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x10, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 815.891971][T18864] overlayfs: unrecognized mount option "ÎÒ\ÒÜ^" or missing value 11:05:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:05:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264a2, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:58 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x6}, 0xb00, 0x0, 0x0, 0x3, 0x6, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:05:58 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x5000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:58 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x11, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) close(r2) splice(r4, 0x0, r5, 0x0, 0x10003, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r5], 0x4240a2a0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f00006f8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="0f0666baf80cb84202548fef66bafc0cb009eec4c1f828c666baf80cb8c8951085ef66bafc0ced46d38334f984860f78345266ba410066b80c0066ef66b8ea008ee0440f20c0350d000000440f22c0440f38ccae4fad0000", 0x58}], 0x1, 0xa, &(0x7f00000001c0), 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x13, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x0, 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x15) ftruncate(r0, 0x7b298785) [ 816.173330][T18876] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:59 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x6000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0xf, 0x4, 0x0) fork() r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) rt_sigqueueinfo(r2, 0x26, &(0x7f0000000240)={0x7, 0x6, 0x8}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1, 0x2001) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x60, 0x9, 0x9, 0x8, 0x0, 0x6, 0x41000, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x101, 0x80000000, 0xff, 0x4e4631bdc91062d5, 0x1000, 0x401, 0x3}, r3, 0x3, r4, 0x2) [ 816.381534][T18921] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:05:59 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x18, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:05:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264a3, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:05:59 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x7000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:05:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() signalfd(r1, &(0x7f0000000000)={[0x8001]}, 0x8) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000980)={{0x2, r4, 0xffffffffffffffff, 0xee00, r5, 0xc9, 0x3ff}, 0xfffc0000, 0x5, 0x80, 0x2, r3, r3, 0x6}) process_vm_writev(r3, &(0x7f0000000580)=[{&(0x7f0000000040)=""/94, 0x5e}, {&(0x7f0000000240)=""/219, 0xdb}, {&(0x7f00000000c0)=""/133, 0x85}, {&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)=""/112, 0x70}, {&(0x7f0000000480)=""/98, 0x62}, {&(0x7f0000000500)=""/70, 0x46}], 0x7, &(0x7f0000000800)=[{&(0x7f0000000600)=""/224, 0xe0}, {&(0x7f0000000700)=""/245, 0xf5}], 0x2, 0x0) [ 816.836855][T19003] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:02 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x60, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:02 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x8000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264a4, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x2, 0x40, 0x81, 0x1, 0x0, 0x30000000000, 0x1002, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff8, 0xffffffff}, 0x1840, 0xa6e9, 0x0, 0xb, 0x7fffffff, 0x0, 0xffff}, 0x0, 0x10, r2, 0x0) 11:06:02 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='}@/[!\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00', 0xffffffffffffffff) [ 819.712237][T19142] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:02 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x9000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 819.840957][T19186] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264a5, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:02 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xf0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="100000000000020000000000000000803dce12c8b355ddc01167f34d418fc56544eac610ffa46651eb04aa4f00b8666ac97465ed4a0aaad4d198564432138290210ab01976ad7c9340f1ddd1c23bedf83bb2e31136be133328b189dc1492bb0695406ee0e3927c3251d389622266720aceb05a22d7fcab3e6d52e2c21cd6"], 0x20001290}], 0x1}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x8041, 0x0, 0xe8c2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f00000000c0)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 11:06:02 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xa000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x2e340, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() [ 820.233999][T19206] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 820.569086][T19248] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:04 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:04 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xb000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:04 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff7}, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140), 0x10) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0xf8, 0x6, 0xcf, 0x7, 0x0, 0x1ff, 0x4, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000040)}, 0x40, 0xffff, 0x8, 0x2, 0x401, 0x800, 0x7}, r2, 0xf, r3, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000100)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) fork() 11:06:04 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x10e, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264a6, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 821.543923][T19264] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:04 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x300, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:04 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xc000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264a7, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:04 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8404}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10003, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r3, 0x0, r5, 0x0, 0x10003, 0x0) getpeername$packet(r3, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}, {0x2, 0x4e20, @local}, 0xc, 0x0, 0x0, 0x0, 0xfffb, &(0x7f0000000140)='team_slave_0\x00', 0x2, 0x1f, 0x1}) [ 822.129810][T19323] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:05 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:05 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xe000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264a8, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:05 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x500, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:05 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x4040, 0x0) fork() 11:06:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000140)=""/38, 0x26}, {&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000300)=""/93, 0x5d}], 0x3, 0xd9f, 0x0) [ 823.141985][T19384] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:06 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x600, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264a9, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:06 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xf000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:06 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1601, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="47cd8c62fa461d891cebcd66c014a108f783d9e63c11ca7a77155b2d0204a04713322f180d122d1c") ptrace$cont(0x7, r3, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x84042, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x7f, 0x80, 0x2, 0x4, 0x0, 0x5, 0x20, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x683, 0x2, @perf_bp={&(0x7f0000000140)}, 0x800, 0x7, 0x402, 0x7, 0x7fff, 0x1, 0x7fff}, r3, 0xe, 0xffffffffffffffff, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x7, 0x8, 0x9, 0x1, 0x0, 0x1d, 0x1100, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xffff}, 0x100, 0x7f, 0x0, 0x4, 0x480, 0x800, 0x1}, r2, 0xb, r0, 0x9) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ptrace$cont(0x9, r1, 0x5, 0x9) fork() [ 823.721090][T19445] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:06 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x700, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:06 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x10000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 824.055364][T19488] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:07 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000140)=""/38, 0x26}, {&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000300)=""/93, 0x5d}], 0x3, 0xd9f, 0x0) 11:06:07 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x11000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264aa, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7fff, 0x400000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:07 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x900, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 824.610057][T19500] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 824.770671][T19545] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:07 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xa00, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264ab, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:07 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x18000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 825.029081][T19553] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x183c02, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0xff, 0x5, 0x8, 0x20, 0x0, 0x5, 0x40, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x6, 0x9}, 0x4a405, 0x8, 0x72f8e217, 0x9, 0x1, 0x2, 0x91c}, r0, 0x0, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() [ 825.249409][T19597] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:08 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x60000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:08 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xb00, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:08 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264ac, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:08 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x65580000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000140)=""/38, 0x26}, {&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000300)=""/93, 0x5d}], 0x3, 0xd9f, 0x0) 11:06:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000741000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r0, 0x30343000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x20, 0x1, 0x6, 0x0, 0x3ff, 0x11, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}, 0x4, 0x40, 0x0, 0x5, 0x2, 0x3, 0x6}, 0xffffffffffffffff, 0x5, r0, 0x3) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x3) fork() 11:06:08 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xc00, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 825.765425][T19620] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 826.112461][T19670] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:08 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x81000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:09 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xe00, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264ad, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 826.443928][T19682] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:09 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x88a8ffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000140)=""/38, 0x26}, {&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000300)=""/93, 0x5d}], 0x3, 0xd9f, 0x0) 11:06:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264ae, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 826.931031][T19733] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:09 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:09 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xe01, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:09 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264af, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:10 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xab0c0000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:10 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xf00, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) [ 827.401785][T19781] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 827.586277][T19822] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:10 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xf0ffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:10 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1100, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264b0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:10 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 827.943991][T19834] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:10 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1800, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:10 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:10 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfcffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 11:06:11 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x2000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:11 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xffffa888, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264b1, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:11 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x5865, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:11 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffff000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:11 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x6000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264b2, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:11 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xffffff7f, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:12 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x6558, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:12 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xffffff9e, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264b3, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:12 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x8100, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 829.850657][T20096] validate_nla: 5 callbacks suppressed [ 829.850679][T20096] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:12 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xf000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:12 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffff0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264b4, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:13 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffff1, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:13 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x34000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="6578656320262800457476cbf0da97d6cfa61504617953000ba150922af57f23c450386b5a079fa142d0d52e79632c137d8d8a5bd31c8efccc2de8d12a18b75c295b868cc6528c703e8f2e48f58111398c74cb63e3952031d9fe189f727d893a83b0ab5499bf796f6f0e26fc7a3615657ce137416e0623c05055e75e05377075ee187478ff90a72ebbad65379b9723ddcc54214cd38b0aed5e2a64151942a8f13258bad400020000000000000000"], 0xfffffe3b) rt_sigqueueinfo(r0, 0x13, &(0x7f0000000040)={0xc, 0xfffffffe, 0x3c83dbd}) tkill(r2, 0x33) sched_setscheduler(0x0, 0x6, &(0x7f0000000a40)=0x43d2) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000a00)="b55a862e02889dc25d10462b5d555352") prctl$PR_SET_PTRACER(0x59616d61, r2) fork() write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='lock_acquire\x00', r4}, 0x10) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000600)={0x0, 0x1, 0xfffffffffffffff9}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xffff, 0x0, [0x401, 0x5, 0x2, 0x1ff, 0x8], [0xfffffffffffffeff, 0x7, 0x101, 0x9, 0x1, 0x8, 0xfffffffffffff1c4, 0x3, 0x4, 0x4, 0x7, 0x5, 0x1, 0xfffffffffffeffff, 0x7fffffff, 0x1, 0xff, 0x3, 0x5, 0x0, 0x400, 0x0, 0x6, 0x1, 0x1, 0x1b, 0x5, 0x5, 0x100000000, 0x5, 0x8001, 0x8c8, 0x26f, 0x3, 0x3, 0x2, 0x1, 0x67ea, 0x64, 0x4, 0x9, 0x6, 0x5, 0x3, 0x9, 0x1, 0x8001, 0x2, 0x8, 0x3, 0x18000000000000, 0x0, 0x8001, 0x0, 0x9, 0x8000, 0x81, 0x5, 0x2433, 0x1f, 0x69a28413, 0x5, 0x5f1, 0x7, 0x5, 0xffff, 0x0, 0x7, 0x10001, 0x8, 0x4e, 0x3ff, 0x6, 0x4, 0x8001, 0x4, 0x8a4d, 0x9, 0x5, 0x0, 0x7, 0x7, 0x9, 0x7fffffff, 0x4, 0x0, 0x2, 0xf1b, 0x35e1, 0x5, 0x7fffffff, 0x2a1, 0x823, 0x7, 0x5, 0xe75, 0x2, 0x1f, 0x6, 0x5, 0x9, 0x8, 0x53d, 0xdc, 0x1000, 0x1877, 0x20, 0x7, 0x9, 0xc168, 0x6, 0xd2, 0x1, 0x7, 0x7, 0xdc4, 0x3, 0x9fc6, 0x2, 0x4000000000005, 0x6]}) [ 831.207821][T20122] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 831.243229][ T37] audit: type=1400 audit(1616583973.956:273): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name="&(" pid=20116 comm="syz-executor.3" 11:06:14 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:14 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x200000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x10003, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) dup3(0xffffffffffffffff, r1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x10003, 0x0) splice(r4, &(0x7f00000000c0)=0xfffffffffffffffd, r4, &(0x7f0000000080)=0x2, 0x33fdf66, 0x7) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fork() [ 831.516052][T20167] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:14 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x400300, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:14 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264b5, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 832.071892][T20188] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 832.187980][T20188] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:15 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xf0ffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:15 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264b6, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:15 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0xfffffffffffffdd7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x1, 0x0, 0x7, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x7f, 0x80, 0x20, 0xfa, 0x0, 0x80000001, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8001, 0x4, @perf_bp={&(0x7f0000000040), 0x3}, 0x10001, 0x5, 0x8001, 0x8, 0x21, 0x9, 0x3ff}, 0x0, 0xd, r0, 0x1) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x458242, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x81, 0x40, 0xff, 0xff, 0x0, 0x3, 0x8, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={&(0x7f0000000100), 0x8}, 0x80, 0x2, 0x8, 0x5, 0xfff, 0x0, 0x1f}, 0xffffffffffffffff, 0x0, r0, 0x2) [ 832.541152][T20240] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:15 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() [ 832.863988][T20286] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:15 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x24, &(0x7f0000000000)={0x2e, 0x3, 0xc92d}) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) sched_setscheduler(r0, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() 11:06:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264b7, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:15 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x3, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:16 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xfb5e}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r1 = getpid() fcntl$getownex(r0, 0x10, &(0x7f0000000540)) sched_setscheduler(r1, 0x5, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000600)={0x5, 0x70, 0x5, 0x4, 0x6, 0x40, 0x0, 0xfff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x9}, 0x1100, 0xb9a1, 0x1, 0x4, 0x0, 0x7, 0xffff}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000680)={0x0, 0x70, 0x6, 0x1, 0x0, 0x80, 0x0, 0x5, 0x182, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x10000ffffffff, 0x7ffe}, 0x91, 0x7e0, 0xfffffffc, 0x5, 0xb, 0x4, 0x1c06}, 0x0, 0xfffffffffffffffd, r2, 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) clone3(&(0x7f0000000340)={0x280000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x1e}, &(0x7f0000000240)=""/221, 0xdd, &(0x7f00000000c0)=""/127, &(0x7f0000000140)=[r1, r1, r1, r1, r1, r1, r1, r1, r1], 0x9}, 0x58) ptrace$setregs(0xf, r4, 0x6, &(0x7f00000003c0)="01aa1189e16710c00f927de008d7b2eedcd673808d42dac94be54554c27ec23f2aae24744c929ac5c8cd3efd62645fba8876f9ee39afbf7f88d7abf635b101ce7a5483de36e92002e999670f7b597fd7eacb5289165867fe019bb6340713f10fc0f7faf07732e8b04082d76c3cdbb08b7d467249ce437c4ddd13ed8a68bdf7fa50397e18e2c7b6739d466546235fb78505465e88c50e1f2a0be6c7c87ef9bd7bd7a10e55") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000500)=0xc) tkill(r5, 0x20) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x10003, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) fork() [ 833.227616][T20298] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:16 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x10e0000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:16 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x4, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 833.486973][T20339] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264b8, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:16 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x5, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:16 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x2000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 833.846365][T20362] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x2, 0x12, 0x1a, 0x19, "d1269c59206898929ac6c4970edb90494b522243fdc06eee519bbb11532ce0b3f24fd1dad4b10783e1b815cb7ed37ad508731557c24708878f63988aa112c887", "e048cc6d2b1228bcec58d4dd56a9d98860ac3ac3975e6635d875d528b1173f0c", [0x0, 0x1]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x10001, 0x101, 0x0, 0xa, 0x19, 0x5, "d24fd27e8791a17a9153b1306a121a164cb400d855be8f4937cab25a4f5e6f5447f6c1875e41f055b00b3baab872a9a900d494dd1227e12219f782cdd04c878a", "22a1517c6d94912f0571d3d315161a10d0b2c0a7d20d9f79bcec99d9f487eec1e5e2fe3a009301ca192cf4da0013d60481139631f95e3e368f0c3f1f18e11c80", "7a88bcacef0b41ef2562467e32afa9f35a4ab01db10b2bdd14d9fc9d8312ddba", [0x1, 0x292e]}) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x60080, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() 11:06:16 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x6, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:16 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x3000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264b9, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:17 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x7, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:17 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x4000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 834.719050][T20477] debugfs: Directory '20477-6' with parent 'kvm' already present! 11:06:17 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x5000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:17 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x8, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264ba, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 834.952198][T20516] validate_nla: 3 callbacks suppressed [ 834.952227][T20516] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:17 executing program 5: sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 835.240527][T20554] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:18 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0xc0285629, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) r1 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001a000405000700003934bddbdb532e0bd024ffdbf354d9b7f636ae22c3212988241fc3ecf0aadc534f3fd0171f260d5d4ef0bb2bdca1bcec88b3e0962cd8530d61e6153043b90002dd31dcc159b2fcdd30b4a9d2592076455e4d76d38e178377ec432a60a4812fc687e789a3311285bdfee7defeb66ab08b6137d732d06340aff68616696cf0d70840ce8ae5b84eedd99b2f62dbd292bc2ef46f1ec5ee29e1f93f44be0200972360f3478513dbdc60eb8a2fea9be8ae0c50008f2680497ef5ae29c806dd589f337d683646e62fbd2198393102cc3f236868211c5148b2a63f01faa1ae00"/247], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) sched_setscheduler(r1, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() 11:06:18 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x9, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:18 executing program 5: sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:18 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x6000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264bb, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 835.634111][T20571] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:18 executing program 5: sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:18 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0xa, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 835.797258][T20613] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:18 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x7000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264bc, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:18 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() [ 836.085194][T20631] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:19 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0xb, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:19 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x8000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264bd, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:19 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0xc, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:19 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x9000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 836.687098][T20684] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:19 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xa000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:19 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x508, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x1) fstat(r3, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r4) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@private=0xa010101, 0x4e21, 0x1, 0x4e22, 0x0, 0x0, 0x1a0, 0x20, 0x28a394a5ff614d36, 0x0, r4}, {@in6=@ipv4={[], [], @loopback}, 0x4d3, 0x32}, @in6=@private2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17d577ee}, {0xfffffffffffffffa, 0x9, 0x4, 0x6}, {0x3f, 0xff, 0xa7}, 0x70bd2a, 0x3506}, 0x0, 0x8}}, 0xf8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x508, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x1) fstat(r6, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r7) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@private=0xa010101, 0x4e21, 0x1, 0x4e22, 0x0, 0x0, 0x1a0, 0x20, 0x28a394a5ff614d36, 0x0, r7}, {@in6=@ipv4={[], [], @loopback}, 0x4d3, 0x32}, @in6=@private2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17d577ee}, {0xfffffffffffffffa, 0x9, 0x4, 0x6}, {0x3f, 0xff, 0xa7}, 0x70bd2a, 0x3506}, 0x0, 0x8}}, 0xf8}}, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x21820, &(0x7f0000000340)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}], [{@dont_measure='dont_measure'}, {@appraise_type='appraise_type=imasig'}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@measure='measure'}, {@uid_lt={'uid<', r4}}, {@fowner_lt={'fowner<', r7}}, {@seclabel='seclabel'}, {@appraise_type='appraise_type=imasig'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x58, 0x18, 0x8, 0x70bd2a, 0x25dfdbff, {0x2, 0x14, 0x0, 0x0, 0xfc, 0x2, 0xff, 0x6}, [@RTA_FLOW={0x8, 0xb, 0xffff}, @RTA_SRC={0x8, 0x2, @multicast1}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x1, 0xff}}, @RTA_UID={0x8, 0x19, 0xee00}, @RTA_PREFSRC={0x8, 0x7, @multicast1}, @RTA_UID={0x8, 0x19, r7}, @RTA_PRIORITY={0x8, 0x6, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4004810) fork() 11:06:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264be, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:21 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xb000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:21 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x1, 0x0, 0x3, 0x38, 0x0, 0x7f, 0x428, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x65f4d9db, 0x3, @perf_config_ext={0x100, 0x200}, 0x10412, 0x7f, 0x41d3, 0x0, 0x0, 0xf65, 0x200}, 0xffffffffffffffff, 0x7, r0, 0x1b) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() 11:06:21 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0xf, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 838.466350][T20767] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:21 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x10, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 838.784673][T20816] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:21 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) 11:06:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:21 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xc000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264bf, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 839.174300][T20834] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:22 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x11, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:22 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xe000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 839.406364][T20875] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264c0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:22 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x18, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:22 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xf000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:23 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:23 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x10000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264c1, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x32) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x88, 0x48, 0x20, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x18, 0x0, r5, 0xf}, [@IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_ADDRESS={0x14, 0x1, @private0}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x88}, 0x1, 0x0, 0x0, 0x40904}, 0x90) fork() bind(r2, &(0x7f0000000240)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x1000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}, 0x80) [ 840.416000][T20977] validate_nla: 2 callbacks suppressed [ 840.416019][T20977] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 840.763321][T21028] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:23 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:23 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x11000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264c2, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:23 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x2, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 841.253450][T21087] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 841.517998][T21127] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:26 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x3, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:26 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x18000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x12000, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xff, 0x1, 0x0, 0x5, 0x0, 0x7f, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x6, 0x10000, 0x9, 0x6196, 0x9feb, 0x9}, r0, 0xc, r2, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x400, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x81, 0x20, 0x0, 0x18, 0x80002, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5d00, 0x4, @perf_config_ext={0x1, 0x4}, 0xc080, 0x7, 0x7fffffff, 0x6, 0x0, 0x7fff, 0x5}, r3, 0x2, r4, 0x1) fork() 11:06:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264c3, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 843.789847][T21144] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:26 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x4, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:26 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x60000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264c4, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:27 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x5, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 844.403011][T21204] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 844.606370][T21244] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:28 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x65580000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:28 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x6, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264c5, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x4, 0x1, 0x5000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) fork() [ 845.754413][T21270] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 846.031091][T21312] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:28 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x7, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:28 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x81000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264c6, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) ptrace$cont(0x18, r0, 0x20, 0xe11) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) poll(&(0x7f0000000000)=[{r1, 0x214}, {r3, 0x1}, {r1, 0x364}, {r4, 0x4000}, {r1, 0x1210}], 0x5, 0x8) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 846.407199][T21336] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 846.674432][T21377] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:29 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x8, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:29 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x88a8ffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264c7, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0x7fff, 0xc, 0x4, 0x8, 0x5, {}, {0x1, 0xc, 0x6, 0x40, 0xfa, 0x1, "dbd080f0"}, 0x9, 0x2, @offset=0x9, 0x35, 0x0, 0xffffffffffffffff}) flock(r2, 0xa) r3 = fanotify_init(0x4, 0x101000) fcntl$setstatus(r3, 0x4, 0x400) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4404, 0x94) fork() [ 847.004910][T21426] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:29 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x9, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 847.284333][T21464] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:30 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() clone3(&(0x7f0000000440)={0x2200380, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280)=0x0, {0xf}, &(0x7f00000002c0)=""/89, 0x59, &(0x7f0000000340)=""/133, &(0x7f0000000400)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) sched_setscheduler(r2, 0x5, 0x0) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ptrace$setregs(0xf, r1, 0x0, &(0x7f00000004c0)="a1fddba2dea420b9f4f5ac83bc484f2732d38bdfe4a03436a4a36b1e513cfec32346fe4b8e76c78f155a5a0c15057e686adb4f0b080e30b3c239b92ec5b4acde1b3a4310c34d065a1ff1140d9bdb10472bdb31569ad6bffe8b91d6e8d4118b6d7bb668752b88920fdb631583058866eb1ef30d4109bf59cf341c1ef1248cc926b6b90aa30a1479cf3f71989dc6f5f2da2a2ba44d851a524af97d7d93049846395d00a2d4d4a0dbe3c3528a8a30b79318fef35763ca65a7f6") r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fork() r5 = dup2(r4, r4) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={{r5}, 0x0, 0xdb2, 0xffff}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x94080, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000100)={0x0, r7, 0x1}) 11:06:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264c8, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:30 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:30 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x956, 0x800}, 0xa, 0x0, 0x4, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() 11:06:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:30 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xf0ffffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 847.862187][T21506] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 847.941578][T21502] debugfs: Directory '21502-4' with parent 'kvm' already present! 11:06:30 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0xb, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 848.095726][T21550] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:30 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x79, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x1, 0x20, 0xb6, 0x12, 0x0, 0xfffffffffffffffe, 0x20000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xee00, 0x4, @perf_bp={&(0x7f0000000080), 0x9}, 0x4044, 0x9ae0, 0x101, 0x8, 0x1f, 0xff, 0x101}, 0x0, 0x8, r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r3 = accept$unix(r2, &(0x7f0000000240)=@abs, &(0x7f0000000140)=0x6e) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000300)={0x9, 0x8, [], 0x1, &(0x7f00000002c0)=[0x0]}) 11:06:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264c9, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:31 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0xc, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 848.512448][T21576] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fork() 11:06:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:31 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfcffffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:31 executing program 3: dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = getpgrp(r1) sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x4, 0xd, 0x8, 0x9, 0x0, 0x9, 0x20000, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xa80d, 0x89a6}, 0x80, 0x8, 0x6, 0x5, 0x7, 0x40, 0x8000}, r2, 0x5, r0, 0x0) sched_setscheduler(r1, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fork() 11:06:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264ca, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:31 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0xe, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_setscheduler(r1, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x10003, 0x0) sendmsg$netlink(r2, &(0x7f0000000580)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000000}, 0xc, &(0x7f0000000400)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="a80000002e00000125bd7000fddbdf258efe3b042d41d36c365f750d79f05eb53a1dac6b1d7f36fd65841cad0a55c195772a9c39c64ffe8c55855d734183fd0e3bbedc104f38b2469afd0d95298a2256243a2045cb9760c8f7d627c68bc7c05d9a0875c185b2cf880aa983ac1d89da1606d103ea3a23e736e02f46d482e83cea1144f39090420910a4bc22a5a62d6da5da3aada4b73d81fad836d1f58aa6d4318a8a2d6018fc8000"], 0xa8}, {&(0x7f0000000780)={0x378, 0x2c, 0x200, 0x70bd26, 0x25dfdbfd, "", [@generic="dded5e95eed0e66134bb1e901fbcd92510b4530723b036ce63e0e82f0a7b142ccbd5abd5eb69eeb6afe9539f6bfd6025812d9d2063c6bd2de3aac42f1fab0c23a02bbce7924e0d5001878f885d63c9d7a892937e76125cbe765a99f419a099125c79f8c2151c5fb00091e40bad081eb57783a185b4575f6a25491ba1a1f3b02bcbe052247f11be9b5caebb1e7aa148c1251550aa46367a64353573f16ebfb3f67084934a40a4a04b4b41522d83bff4d28ac0ac490dc948793556d42cc386a959b44478035a55ba5bcc6163ad0697584c5fcb98b2980d34938d0e43c4e12132c57a71792bdd528302d18d1116b24e2f41", @typed={0x8, 0x1d, 0x0, 0x0, @pid=r0}, @typed={0xc, 0x32, 0x0, 0x0, @u64=0xfffffffffffffff7}, @nested={0x225, 0xe, 0x0, 0x1, [@typed={0x1e, 0x2e, 0x0, 0x0, @binary="38cba247e5441971520d6a2f8189c7d4734e3ebb39a5481374ae"}, @generic="20f901fb2476973aae02a3a76ecca5a314b511a8e56ee7c116f8f925cc3c1d56c3de5b6ea969c525cd94accf1a58674c092b3d6e646d76d1e31f84f267076b97e3588acb290537e5c98709530661457e19e8359f7172cc0243463e090ca5e9dc965582d0ee5219ff6d1cbca8c791e935d687465920ffa4994fe9875eee2c8c341363a301551e38895f9890d00fbcdbd3ee4dd59b625588464be38df9b4570285e4ff7af6b5d03f7c7ff97dca182fafd3b462d81d90f6714fb142db25a59bcd7bef29", @generic="e47ca95752ca054719f8d47b0f253f892e5140ae47ee0a15eff2c14c61e27a25aa1a968c4c51afc9f17020db59b65b1f40b1a6817c7310c7e67454ed6e81e31d95d49eab4c13a5735f717b332a8b55809f76cf1ae2deb7108f4a2c", @generic="794c5463d1b8e54b1fbc95a3e8f19f3119cec1c586a160c089eaffbf27c0d7b88c93555cec7d9d45e2486c6c2c29fe", @generic="f36c984913188a3b90d038aeb367ef27c41737f6e50a5a8b395744976da60ee4b79a0252ab16537d28a5c287069ab3fc0b6a101ab886e4c359bc56b37af77a7ac822c8413674983a4f8ec478f0163bf32cb969fafec8d0166eee09565debc32d0e9d356eb3593cd494643fa31a0b64f3717e46cadd652e459124e2fe4b7ec98a977bd63e9cb304821ada4518741b9b2cd38291dd9edb83457aac9b5345c95805ce7eb0e810ff68eec798edfbab06730a0dfe2fc083"]}, @generic="bdedcebb0ab5ffa01d4c7b0717f072434cbf934a57567290905f94c2ed0e5ca6c85320f6c74645b245e5d7259fe9de115f7b36c4fd", @nested={0x4, 0x76}]}, 0x378}], 0x2, &(0x7f0000000500), 0x0, 0x40}, 0x20000004) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fork() 11:06:31 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfeffffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 848.945655][T21636] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fork() 11:06:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264cb, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:32 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0xf, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:32 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xffffa888, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:32 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffff000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:32 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x10, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264cc, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:33 executing program 3: perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000040)={0x80, 0x3, 0x109, 0x2}) 11:06:33 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xffffff7f, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fork() 11:06:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:34 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x11, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264cd, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:34 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xffffff9e, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:34 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x20, 0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf6, 0x4f7}, 0x100, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x4000010, r0, 0x25894000) getpid() r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x400, 0x70bd26, 0x25dfdbfd, {0xa, 0x20, 0x4, 0xfe}, [@IFA_CACHEINFO={0x14, 0x6, {0x1ff, 0x52c, 0x1000, 0x8001}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x10000000) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000006, 0x4000010, r0, 0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x88003, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() [ 851.410779][T21851] validate_nla: 3 callbacks suppressed [ 851.410800][T21851] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:34 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x18, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 851.697849][T21903] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:34 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x60, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264ce, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 852.009460][T21913] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:35 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffff0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, 0x0, 0x0) 11:06:35 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264cf, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:35 executing program 3: r0 = getpid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0xc89, 0xffffffff, {r0}, {0x0}, 0x0, 0x5}) fstat(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0xf8}}, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x21820, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c646f6e745f6d6561737572652c617070725c6973655f747970653d696d617369672c6d61736b3d4d41595f57524954452c6d65617300000000736d61636b6673726f6f743d7569643c2c666f776e65723c822eed6f05c726625ca9ff887494564f954b355970ac644824db", @ANYRESDEC=r3, @ANYBLOB=',seclabel,appraise_type=imasig,func=FIRMWARE_CHECK,\x00']) lstat(&(0x7f0000005ec0)='./file0\x00', &(0x7f0000005f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgid(r0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x33) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) r7 = fork() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000071c0)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000000c0)="a53db762fbc5d1f22615ee91293d9fe766d4ce5460bd6d17e060329a2bbdbe226d16b660bfe3131dd9c433a4212e9eb8d6b7f85f9c7a4cf7dcae9a5d6127e2f8cf144830d8c3d9a6cd4dd512b0ae474db02f1d5fa6af9cd2cde50e25716b7537a528db879c5412b6f279c82b24c02fca81ac7c438c907df4507d97ce40d1c153c135105d090252d2e5ec32f902f4f7ff60fc24fe61b9276f7028f23fef16a7f64a20fed246757106b1ebe19f49fef6", 0xaf}, {&(0x7f0000000240)="24cd4e7ee94c63a5f049f44c925d9b6664f889ed836216770ce10c09c210abe94ddf5748c425c46ba0d5aaba49a74ab003a7c47923fae8cda4b1c1231dc63f7818c9208b60d16aaa958d975a9dec9c34c6149a9c648b045d8a8505cfb12c99c3765f04bca50e06a124b5fe63ce20a1bbe179669deeebe037e998cb96c9f4a81368bfb43d436d084f4727fe7a8bb857db49f37589c544f745845f692ce05f53e4b1ff7c9dbbfe8987e069217df3293fb51730f055f8fd893663e76ee4ebc67806c64cbe6afd373da8afc7d93be8a87cbfc844e0971ce005", 0xd7}, {&(0x7f0000000340)="e28ff4270b6a5f1408b220679f2327e1f6cb464deee68d8c8c2834e02174cca0ebecf4e55ea659bad92e38999388b5cf08dc39012dae7bf228676098776f24", 0x3f}], 0x3, &(0x7f00000006c0), 0x0, 0x90}, {&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000840)="4a825c51de18d72f6bdb66e6ff319e750e37325733c4941083dd", 0x1a}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="862ec86c6932b0c28915566f9c89d39dd09285f00ecfefe016be7e3b6032c8921badf0ad8914a13d56d8e65a9125e89ccc7371740a7878faecda7470f9bbdb99d9a885f59d321e957659795e8ef6cf697bc6451c05878c3e5c80374b6cefae834d0906755cc26f314c9d1650df34837d28ffded883e4038c79d67a50893c5684c036c19dc1040ca493b6758858de160a597f250e2b615ecd4135ed35bad3d5b9b68455224e8a09215d", 0xa9}, {&(0x7f0000001940)="70f912c48f5f57260b0cdc1025ee65adaeac159a5cde83777703c62d7549c75b4d0b9db6e54dcb469f4cf307806e829f0a5f94ef82880ffdd82dd387328ecd1d5d209b2c93d626ed087792ec3ac285d70ee2e573c63ad6fb1a59c653d314fb359a18d2a5b173608482dbfd9d0b8e3ddd2d8a78167835fc5cbcd234e4cbe50cd9253f9c7f4762e7c20e15895951fbaf147b0cb1aee3f50fd19b4707a154ab6e9753c99f7aff828acc81254fc29653a5880e7638be8df5372d4b3d4ffa9e04f7ac991dc1458069baba7e81b3387d42ea1424170110", 0xd4}, {&(0x7f0000001a40)="da517fd0c2b52b45246aa6288f8d593497c03377e88b25b86ff9bdb37d416427658715cae789a6f1c4e7b6d33bb97d92944715ef3a648d6d3211ef95c8a01e503682f5b71c9750346035da32a1b73cd0355c2cc7d97c54914f2aa3e0fc4fa991ae10a9cfcd546a85509096c2d7f761507f893903feb30801d5f9b811ea359fe6fb14f1186de6e5500167b2c85098ed0382", 0x91}, {&(0x7f0000001b00)="449d0a78927d461ec3d2982b2aa78a9c907c5499089b713dc59f9f2f817807353ea014245eb25fe4604b257cdb", 0x2d}], 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="0000002e06e2f48434da4fcef11ee340e3a3bb001080219d28cac242e09c76791b599f70"], 0x90, 0x1}, {&(0x7f0000003f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005380)=[{&(0x7f0000003f80)="ceba133bfd4fccf888f3eb42e1493e8b7b1dd77303276e5ff03cce3138576d69d161f5a45106ae4efc5167c313e375f0062695a39c278ed065746de36df147d396083adef6bf2ac2cf882658d0a1baf60d16017a06ca56fe401243e761bdc9e9918766e58773f4c45cc0097d3989462c0cb156677bae0b45e04e041351fe8f3a662ac0e4bcf185f8b4b6a6a16f736241db343533127af13877f5b0d97498396e81181a", 0xa3}, {&(0x7f0000004040)="63e5a460d2cc568a9391066817f3de033fc9e6dde43c01005bda0d75c0d5f9431ce04df51d642f86f1119603f7faf2376a4aeed5b1235cd6593a00494671b830fafc717d2392319afd65dbd60b6a3da585db57a80dae7993b71a7886f0881e3760486f148281c8af99cf30c3302b", 0x6e}, {&(0x7f00000040c0)="40a6cca578db6d5c889cb3deb3d8bfe1296b7399aeb485ea6cddf34dde29fcb76c8489eedd8b2d1f9dff910953923977eedc73375c70234c9ca23076a52752428e9d42f5cca6b93614d11d9ab405e639d034f00ba2ff97df8585654cf1cd50b90bb7e551156c47806b10bad2af4172b603c86f7796f587510c3a57194e4341124363c8443c705ef34c87c0e0aed18fd54966d7eadff95fec7a4ece233c56635da20ae57d3dbaa04a17e4a7cd47ee8eac000f04d8ae2b4e", 0xb7}, {&(0x7f0000004180)="1eba895c1a361a5dbe090d601af7a84bb1a27b6cb3dbd0cfe493801ccce2a9e3f2b238ad220124b20abca76cb56f17c8522cee4979f5ac37f2db5cfbb3117fb364c6fb7567c848892f285609a96011d65d28ebccb0ae362df2c5710d24ea9e41f6cceb79450c2f63b1ca5f4d21e5da882bfb4f170517b40412", 0x79}, {&(0x7f0000004200)="957c0b4c2a50678c7d007f1d9f1c5110b4c61a56b66b74f4f44bcb828885d615e545b131a9909ddb", 0x28}, {&(0x7f0000004240)="0c032143fa6d01b0e67a0a9ef77c9eb65d1ea864f8e1378791a55d6ed7cf431c783652e4873d5ae814", 0x29}, {&(0x7f0000004280)="0d6e03e2cc8a2014dd2a550162893be6", 0x10}, {&(0x7f00000042c0)="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", 0x1000}, {&(0x7f00000052c0)="68938e130de90788a1f5e4b11c380e13031e62c7cf582652970fe166ef6706fb1cf164f28bf3cd6b25456b7624c0b524a8acf51c6c2829caa7c19f0b1ec2e569c2edfd59db08769fa89a630d4b893cee299d0a5b61b392ce5da9e3b38d20b077c071df1e5917ac461d220fa401036e8b6827c8ab974cd334f69cf9fdc2a34b66de45", 0x82}], 0x9, &(0x7f0000005440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r1, r2}}}], 0x40, 0x8890}, {&(0x7f0000005480)=@abs={0x1, 0x0, 0x1}, 0x6e, &(0x7f0000005680)=[{&(0x7f0000005500)}, {&(0x7f0000005540)="687158c66e6c15c2a18273e976adf2fe105c30ac4c34de91b249a6fbf7d7979c1ed2a548718aa49388ffd304049a6eb394a7329390504f028c4c2918507bbcd0bf2fb1050a8659f3f8914c728603b274edac967cfc026ad0c71accd21892e5ccf5a8c1302e3672fc49c872a1cfa3a71b3dca9fe876c39a6220539ff640a19aa7b5660d2e4f5bfeef6433168be50a9b8e4a04af538d6db277986d2a4f7c9b8015fa8dcfe673dc7b9862f061ca273667d212496a93b08ab8dc8f8c435c0ccf87ad71b792d4a15b1f228fae4a350a670ccb4a39d8f4", 0xd4}, {&(0x7f0000005640)="c8", 0x1}], 0x3, &(0x7f0000005a00)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100, 0x8080}, {&(0x7f0000005b40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000005e00), 0x0, &(0x7f0000005f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r2, 0xffffffffffffffff}}}], 0xb8, 0x8080}, {&(0x7f0000006040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007140)=[{&(0x7f00000060c0)="f57bfd5d54a4f127a7fce37623dc99dcf336dfae965bff4990d5a61c5293ac80172b569ee3f0e9422e49bfac0db6e836f3c3e1758fbe9aebe45bff291320cd1855e15c3965adddfb15dbf8f564c7de1a18c1e64475f6220d76df8740be3f621bf283826f48830e41a5e42f3b5205ca09f3a31456b9bcba", 0x77}, {&(0x7f0000006140)="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", 0x1000}], 0x2, &(0x7f0000007180)=[@cred={{0x1c, 0x1, 0x2, {r6, r2, 0xee00}}}], 0x20, 0x28040800}], 0x6, 0x4) sched_setscheduler(r1, 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) fork() [ 852.453226][T21961] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:35 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x40, 0x9, 0x8, 0x1, 0x2, 0x6, 0xfffff001, 0x2e7, 0x38, 0x3bd, 0x3, 0x69, 0x20, 0x2, 0x1, 0x0, 0x3f}, [{0x6474e551, 0x6, 0xff, 0x3, 0x0, 0x4, 0x4}], "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", [[], [], [], []]}, 0x1458) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/134, 0x86}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f00000016c0)=""/81, 0x51}, {&(0x7f0000001740)=""/225, 0xe1}], 0x4, &(0x7f0000001880)=[{&(0x7f0000001840)=""/28, 0x1c}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, 0x0, 0x0) 11:06:35 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x2, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 852.752022][T21961] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:35 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffff1, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264d0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, 0x0, 0x0) 11:06:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:35 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x3, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 853.334686][T22025] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 853.511867][T22030] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:36 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x4, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:36 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x10003, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x70, 0x4, 0x6, 0x80, 0x93, 0x0, 0x200, 0x40002, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x10000, 0x81}, 0x41040, 0x9a7e, 0x6eb740ea, 0x833f1a58d04643c9, 0x59, 0x7fff, 0x1}, 0xffffffffffffffff, 0xe, r0, 0x9) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fork() 11:06:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264d1, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:36 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x5, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 11:06:36 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 854.066759][T22121] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 854.415494][T22172] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10003, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='/dev/kvm\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fork() 11:06:37 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:37 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x6, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 11:06:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264d2, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() [ 854.837029][T22184] debugfs: Directory '22184-7' with parent 'kvm' already present! 11:06:37 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 854.893355][T22204] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:37 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x7, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 11:06:37 executing program 3: pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x73, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xccb, 0x0, @perf_config_ext={0x10}, 0x0, 0x8000, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x3) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) fork() 11:06:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:37 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x8, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264d3, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 11:06:38 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() r2 = fork() perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0xad, 0x80, 0x6d, 0x4, 0x0, 0x4, 0x610, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x4080, 0x8001, 0xffffffff, 0x6, 0x200, 0x80, 0x3}, r2, 0x3, 0xffffffffffffffff, 0x3) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 11:06:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:38 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x9, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:38 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x3, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() [ 855.843819][T22314] debugfs: Directory '22314-5' with parent 'kvm' already present! 11:06:38 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x4, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264d4, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000007, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:38 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xa, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:39 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x5, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:39 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xb, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f}, 0x0, 0x0, 0x7c26}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264d5, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x3}, 0x14}}, 0x0) 11:06:39 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x6, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 856.680552][T22477] validate_nla: 4 callbacks suppressed [ 856.680572][T22477] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:39 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xc, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 856.904416][T22516] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:39 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x7, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264d6, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:39 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xe, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 857.354609][T22531] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fork() 11:06:40 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x8, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x3}, 0x14}}, 0x0) [ 857.655652][T22574] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:40 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xf, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:40 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x9, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x264d7, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:40 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x10, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 858.058304][T22588] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:40 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0xa, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 858.310071][T22630] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:41 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x0, 0x0, 0x6}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() 11:06:41 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x11, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x200000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:41 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0xb, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:41 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) splice(r1, &(0x7f0000000080)=0x4, r3, &(0x7f00000000c0), 0xcb8, 0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r0, 0x0, r4, 0x0, 0x10003, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xe, 0xffffffffffffffff, 0x2) r5 = getpid() sched_setscheduler(r5, 0x5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) fork() perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x20, 0x6, 0x9, 0x1, 0x0, 0x40, 0x10a, 0x9955c2b53be1355, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x6a53b8b5, 0x7fff}, 0x8084, 0x0, 0x100, 0x4, 0xfffffffffffffff7, 0x8}, 0x0, 0xf, 0xffffffffffffffff, 0xb) 11:06:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x3}, 0x14}}, 0x0) 11:06:41 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x18, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 858.785534][T22684] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fork() 11:06:41 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x60, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xe0ffff, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:41 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:41 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() close(r0) sched_setscheduler(r1, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sched_setscheduler(r2, 0x5, &(0x7f0000000080)=0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fork() [ 859.342423][T22760] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:42 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0xe, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:42 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xf0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 859.618062][T22764] debugfs: Directory '22764-4' with parent 'kvm' already present! [ 859.642707][T22821] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:42 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x7) sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffff, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:42 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x300, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:42 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0xf, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 860.002126][T22841] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fork() 11:06:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:06:43 executing program 3: perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x85418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = gettid() ptrace$getregs(0xc, r1, 0x9, &(0x7f0000000000)=""/4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) 11:06:43 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x10, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:43 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x500, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:43 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x11, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:43 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x600, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:43 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000001, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x3}, 0xffffffffffffffff, 0x100000, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) tkill(r2, 0x33) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) tkill(r3, 0x22) r4 = fcntl$getown(r0, 0x9) tkill(r4, 0xc) sched_setscheduler(r1, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fork() 11:06:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:43 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x18, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:43 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x700, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:45 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x900, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x3000000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:48 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:48 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fork() r5 = getegid() setgid(r5) clone3(&(0x7f0000002c80)={0x60000000, &(0x7f0000002a00)=0xffffffffffffffff, &(0x7f0000002a40), &(0x7f0000002a80), {0x2}, &(0x7f0000002ac0)=""/144, 0x90, &(0x7f0000002b80)=""/166, &(0x7f0000002c40)=[r1, r4, r4], 0x3}, 0x58) r7 = syz_open_dev$vcsn(&(0x7f0000002d00)='/dev/vcs#\x00', 0x8647, 0x40) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x10003, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) splice(r11, 0x0, r12, 0x0, 0x10003, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000000)={0x10, 0x20, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@generic]}, 0x10}, {&(0x7f00000002c0)={0x2148, 0x3f, 0x1, 0x70bd28, 0x25dfdbff, "", [@nested={0x14, 0x74, 0x0, 0x1, [@typed={0x8, 0x2a, 0x0, 0x0, @uid}, @typed={0x8, 0x7, 0x0, 0x0, @uid}, @generic]}, @nested={0xc, 0x3b, 0x0, 0x1, [@typed={0x8, 0x53, 0x0, 0x0, @fd}]}, @typed={0xc, 0x5b, 0x0, 0x0, @u64=0x4}, @generic="806b20d121272040ae99b887fc8208d9173e1ea6340ed1db919257de39c684c744f0b203f7b04091ed9e301fc8fc5cc735e5a566fa38ee6a42a7cc70660b24b8902bef0b5b42083fe116421b9179b8f2dfac004b91296f2b8d7f6b4e6feb532a0373924bfad6510fe4ac82d9c74ce8b6f443a450b4407dcc6868614b29b98fd28c1b7032a6c38d8005cb2022a2c9f1dc723f42c9750215cb8b49e9d8a49433c22d25ed26e60d5bd64cc495507f9788083865536ebd85704a4ed3468a8e8c509826ef343e748e3dbbc57c066a", @nested={0x3f, 0x2, 0x0, 0x1, [@generic="f9a2fbcc9ae5c926d7f3223f938f995c17dc35fbd4b08229cd336a", @typed={0x9, 0x2e, 0x0, 0x0, @binary="059ced9768"}, @typed={0x4, 0x43}, @typed={0x8, 0x7f, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x91, 0x0, 0x0, @pid=r1}]}, @generic="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", @generic="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"]}, 0x2148}, {&(0x7f0000002440)={0x90, 0x32, 0x400, 0x70bd28, 0x25dfdbfe, "", [@generic="8e05b502ebe68649d12e1309220080e5ac15e088c378fac744718e84c7c69ed73b14fa1d", @generic="6368499ff390ba8b071387e04aaaa3d7ce2f2d320e1b60c6bd9034c963bf14002d92d4f75986fc819fe9d31d29efb569aed2cd8baa0122cfee817f4fd8df4cdb58acc6c017c623e28b2ed9ce41e8c45ccf71b58d361f64f106"]}, 0x90}, {&(0x7f0000002500)={0x110, 0x17, 0x1, 0x70bd2c, 0x25dfdbfc, "", [@typed={0xc, 0x94, 0x0, 0x0, @u64=0x8}, @generic="5b4a3308c9d6f3429505af7c44c7e69dddba7ed1050a688af74085d32f82094446ad3774e69025e69e1cfae350305f0cf151aa8e88b189f77da58e77543e77e0c5f671ef8520b2d8ad1b3c1dfe3a034ad2bda8ce844c752d9806533529d82034f66362e02dd4bce98dc46faa4f6ed5feed76f53e7634b8fb6f1136bcec3b49faa781da09ef1172d616e3ae08eddd63b4430155efd2b11a42ea78493714e27593fa3acdb1a1358b780273c8966d3a19f5e1e17bbc1d8d89ccac62da787ccee0678351a802ddeb6bea4cd6ad9a99a17c919bcdcd5e7200e2f89b018d5885661b4f3ef67a60cb56b4", @nested={0xc, 0xc, 0x0, 0x1, [@generic, @typed={0x8, 0x64, 0x0, 0x0, @uid=0xee00}]}]}, 0x110}, {&(0x7f0000002640)={0x25c, 0x3e, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x1c2, 0x3f, 0x0, 0x1, [@generic="cecae33c436a8ca592a8e51a592e33bba88f0c", @typed={0x8, 0x7b, 0x0, 0x0, @pid=r4}, @generic="5b64751491ceaf8821f019c92888b6a6f235796ef4b2b3b62abb2ce6c8a390596606230d07f34363331ba375f6235081fbe00156b08284e628661e6318b34097772f7fffa1fc73cbfa6b1f840d3c573c11df2f9921ffefd09c87bbd54a3086d1b86dbafea2f7c10380958751101df05e40436cb7a2984cc60a1444ce539576a12a542c84a522ad180916d7b127c8349b73e52dd9df73bfde1fe057e248261bf66da6a2060a4098d1f6007e3c11ddacc668407ca46353b5b6c6f866ed0f866ee879ed4a11aebd5a694a242bbeb39013415570bdc9d0005bed5d203942ac7d", @typed={0xd, 0x96, 0x0, 0x0, @str='/dev/kvm\x00'}, @generic="f29ce7995a1f5f64677f31fc7a5d45d06a9d825f85c1d613922e6c5f27be6729a5410252ce10a0b5938a7a100aae5ce528fb79bf1b2c279a474fa1cb03c386e08ac513145eb281cb15bd13201b859aa5bf72c0c64c21720a07db3ecc7f54d03ed17b7951bd4acbf7187099b78a61728014321426fd84e01ca459714999b9dad5408e6ba775973638383891f66347d9dc9a8a3d14397da23bd87dea5bb1019d637f8d097085fa1180c92358c12a", @typed={0x8, 0xe, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @generic="fdb65e80cd2b9eeb56289448a700f50c5592a131e3b2c4bd21078af57fe5df7c1bcd692d1cc7c040e998a771c0fcbf4b60274412d68b664965d5e7f3788b219e78973ddf55fdf44743405aa87ebbfe38060bf0fde2f2aa4c101038f01d66ecad2336e2816f48e532f573f568f9edd5f06e259662ce347505c37154b349c4a0d23ff5652b8c"]}, 0x25c}], 0x5, &(0x7f0000002d80)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r2, r3, r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, r5}}}, @rights={{0x28, 0x1, 0x1, [r6, r7, r3, r8, r10, r11]}}], 0x118, 0x4008445}, 0x80) 11:06:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fork() 11:06:48 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xa00, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 865.686817][T23115] validate_nla: 3 callbacks suppressed [ 865.686838][T23115] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:48 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:48 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xb00, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 866.032177][T23175] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:48 executing program 5 (fault-call:2 fault-nth:0): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 866.075070][T23114] IPVS: ftp: loaded support on port[0] = 21 11:06:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:06:49 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xc00, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:06:49 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x2, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 866.313689][T23192] FAULT_INJECTION: forcing a failure. [ 866.313689][T23192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 866.403149][T23192] CPU: 1 PID: 23192 Comm: syz-executor.5 Not tainted 5.12.0-rc4-syzkaller #0 [ 866.412045][T23192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 866.422666][T23192] Call Trace: [ 866.426411][T23192] dump_stack+0x141/0x1d7 [ 866.430943][T23192] should_fail.cold+0x5/0xa [ 866.435500][T23192] _copy_from_user+0x2c/0x180 [ 866.440215][T23192] __copy_msghdr_from_user+0x91/0x4b0 [ 866.445640][T23192] ? __ia32_sys_shutdown+0x70/0x70 [ 866.450837][T23192] ? mark_lock+0xef/0x17b0 [ 866.455385][T23192] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 866.461425][T23192] sendmsg_copy_msghdr+0xa1/0x160 [ 866.466492][T23192] ? do_recvmmsg+0x6d0/0x6d0 [ 866.471145][T23192] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 866.477192][T23192] ? _parse_integer+0x132/0x180 [ 866.482093][T23192] ___sys_sendmsg+0xc6/0x170 [ 866.486757][T23192] ? sendmsg_copy_msghdr+0x160/0x160 [ 866.492083][T23192] ? __fget_files+0x266/0x3d0 [ 866.496902][T23192] ? lock_downgrade+0x6e0/0x6e0 [ 866.501806][T23192] ? __fget_files+0x288/0x3d0 [ 866.506517][T23192] ? __fget_light+0xea/0x280 [ 866.511133][T23192] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 866.517434][T23192] __sys_sendmsg+0xe5/0x1b0 [ 866.521995][T23192] ? __sys_sendmsg_sock+0x30/0x30 [ 866.527066][T23192] ? syscall_enter_from_user_mode+0x27/0x70 [ 866.532996][T23192] do_syscall_64+0x2d/0x70 [ 866.537435][T23192] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 866.543358][T23192] RIP: 0033:0x466459 [ 866.547271][T23192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 866.566995][T23192] RSP: 002b:00007fcc0c858188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 866.575448][T23192] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 866.583449][T23192] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 866.591438][T23192] RBP: 00007fcc0c8581d0 R08: 0000000000000000 R09: 0000000000000000 [ 866.599435][T23192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.607434][T23192] R13: 0000000000a9fb1f R14: 00007fcc0c858300 R15: 0000000000022000 [ 866.681128][T23204] IPVS: ftp: loaded support on port[0] = 21 [ 866.690394][T23201] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:06:49 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x3, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:06:49 executing program 5 (fault-call:2 fault-nth:1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:49 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xcab, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 867.147678][T23279] FAULT_INJECTION: forcing a failure. [ 867.147678][T23279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.227713][T23279] CPU: 1 PID: 23279 Comm: syz-executor.5 Not tainted 5.12.0-rc4-syzkaller #0 [ 867.236572][T23279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 867.247392][T23279] Call Trace: [ 867.250823][T23279] dump_stack+0x141/0x1d7 [ 867.256340][T23279] should_fail.cold+0x5/0xa [ 867.260980][T23279] _copy_from_user+0x2c/0x180 [ 867.265708][T23279] iovec_from_user+0x242/0x3c0 [ 867.270528][T23279] __import_iovec+0x65/0x500 [ 867.275187][T23279] import_iovec+0x10c/0x150 [ 867.279830][T23279] sendmsg_copy_msghdr+0x12d/0x160 [ 867.284997][T23279] ? do_recvmmsg+0x6d0/0x6d0 [ 867.289643][T23279] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 867.295678][T23279] ? _parse_integer+0x132/0x180 [ 867.300593][T23279] ___sys_sendmsg+0xc6/0x170 [ 867.305245][T23279] ? sendmsg_copy_msghdr+0x160/0x160 [ 867.310660][T23279] ? __fget_files+0x266/0x3d0 [ 867.315637][T23279] ? lock_downgrade+0x6e0/0x6e0 [ 867.320545][T23279] ? __fget_files+0x288/0x3d0 [ 867.325270][T23279] ? __fget_light+0xea/0x280 [ 867.329910][T23279] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 867.336242][T23279] __sys_sendmsg+0xe5/0x1b0 [ 867.340791][T23279] ? __sys_sendmsg_sock+0x30/0x30 [ 867.345883][T23279] ? syscall_enter_from_user_mode+0x27/0x70 [ 867.351826][T23279] do_syscall_64+0x2d/0x70 [ 867.356365][T23279] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 867.362498][T23279] RIP: 0033:0x466459 [ 867.366428][T23279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 867.386425][T23279] RSP: 002b:00007fcc0c858188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.394893][T23279] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 867.402975][T23279] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 867.410975][T23279] RBP: 00007fcc0c8581d0 R08: 0000000000000000 R09: 0000000000000000 [ 867.418983][T23279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.426997][T23279] R13: 0000000000a9fb1f R14: 00007fcc0c858300 R15: 0000000000022000 [ 869.901434][ T3240] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.919004][ T3240] ieee802154 phy1 wpan1: encryption failed: -22 11:07:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x5, 0x2, 0x0, 0x0, 0x7f, 0x2008, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x1}, 0x40024, 0x40, 0xffff, 0x9, 0x8, 0x4, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x3) fork() 11:07:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x4640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:01 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x4, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:01 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xe00, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:01 executing program 2 (fault-call:5 fault-nth:0): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() [ 879.347383][T23366] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:02 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x5, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:02 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xf00, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:02 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x6, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:02 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x1100, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:02 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000004008501000000000000850000007c00000018270000a0ac839d7ec6e16fe96cf7d8a3013fccc95c87c442313de63e962a517d5c1f9fb9ef9abdefc7e942261d6ab3cfd581a12ec32a4f5e0888ddecd0986c9fd995f882b2eb75fb7037adc0991cda291768b42b6b200c03bc8c4e7769fc85f11e5a38189ac8dad3c9fd0000000000000000", @ANYRES32=r3, @ANYBLOB="00000000000100009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x800, 0x0, 0x0, 0x41100, 0x9, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xb, 0x0, 0x1000000}, 0x10, 0x21252, r3}, 0x78) dup2(r4, r0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() [ 879.919193][T23439] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 880.020367][T23362] FAULT_INJECTION: forcing a failure. [ 880.020367][T23362] name failslab, interval 1, probability 0, space 0, times 0 [ 880.034072][T23362] CPU: 1 PID: 23362 Comm: syz-executor.2 Not tainted 5.12.0-rc4-syzkaller #0 [ 880.042914][T23362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 880.053189][T23362] Call Trace: [ 880.056516][T23362] dump_stack+0x141/0x1d7 [ 880.060901][T23362] should_fail.cold+0x5/0xa [ 880.065451][T23362] should_failslab+0x5/0x10 [ 880.069996][T23362] kmem_cache_alloc_node+0x64/0x3b0 [ 880.075239][T23362] ? copy_process+0x613/0x7150 [ 880.080060][T23362] copy_process+0x613/0x7150 [ 880.084699][T23362] ? lock_chain_count+0x20/0x20 [ 880.089725][T23362] ? lock_chain_count+0x20/0x20 [ 880.094764][T23362] ? _parse_integer+0x132/0x180 [ 880.099706][T23362] ? __cleanup_sighand+0xb0/0xb0 [ 880.104702][T23362] ? kernel_clone+0x314/0xab0 [ 880.109418][T23362] kernel_clone+0xe7/0xab0 [ 880.113875][T23362] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 880.119893][T23362] ? find_held_lock+0x2d/0x110 [ 880.124695][T23362] ? create_io_thread+0x150/0x150 [ 880.129790][T23362] ? find_held_lock+0x2d/0x110 [ 880.134602][T23362] __do_sys_fork+0x8a/0xc0 [ 880.139064][T23362] ? kernel_thread+0xf0/0xf0 [ 880.143742][T23362] ? syscall_enter_from_user_mode+0x27/0x70 [ 880.149684][T23362] ? lockdep_hardirqs_on+0x79/0x100 [ 880.155186][T23362] ? syscall_enter_from_user_mode+0x27/0x70 [ 880.161114][T23362] do_syscall_64+0x2d/0x70 [ 880.165906][T23362] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 880.171846][T23362] RIP: 0033:0x466459 [ 880.175789][T23362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 880.195426][T23362] RSP: 002b:00007fb29aacd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 880.203906][T23362] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 880.211903][T23362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 880.220016][T23362] RBP: 00007fb29aacd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 880.228013][T23362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.236099][T23362] R13: 0000000000a9fb1f R14: 00007fb29aacd300 R15: 0000000000022000 [ 880.273517][T23502] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x5640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0xf, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:03 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x7, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:03 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x1800, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 880.641119][T23552] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:03 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x70, 0x1, 0x1f, 0x35, 0x6, 0x0, 0x2, 0x2400, 0x6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x1}, 0x10000, 0x1, 0xc50, 0x8, 0x7, 0x59b, 0x80}, 0xffffffffffffffff, 0xb, r0, 0x4) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x1, 0x5, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x8, 0x5}, 0xa210, 0x3f, 0x5, 0x1, 0x0, 0xffffff80, 0x3}, r1, 0xffffffffffffffff, r3, 0x9) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0xfb, 0x5, 0x6, 0x3f, 0x0, 0x4, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp, 0x9, 0x7fffffff, 0x7, 0x5, 0xd7, 0x5, 0x20}, r1, 0x6, 0xffffffffffffffff, 0x8) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 11:07:05 executing program 2 (fault-call:5 fault-nth:1): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:07:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0xc0, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:05 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x8, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:05 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x5865, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:05 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000240)={0x0, "bd114450581d25d9cfce9adb0d792c40"}) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000b00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000600)={r4, 0x1, 0xfffffffffffffff9}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001600)={r4, 0x8b84, 0x1, [0xfffffffffffffe00, 0x3f, 0x0, 0x9], [0xffffffff, 0xa686, 0x3e9, 0x9, 0xfffffffffffffff8, 0x5, 0x400, 0x25e, 0x6, 0x1, 0x0, 0x3ff, 0xffffffff, 0x7, 0x0, 0x6, 0x3, 0x3, 0x0, 0x1, 0x2, 0x40, 0x4bc80f5f, 0xd3f, 0x9a6d, 0xf4, 0x8, 0x80000001, 0x0, 0xffff, 0xb11, 0xf0b, 0x9, 0x2, 0x1000, 0x1fe3, 0x7a, 0xafb, 0x8, 0x33, 0x0, 0x0, 0x1, 0x9, 0xffffffff, 0xffffffff, 0x2, 0x4, 0x1f, 0x7, 0x3ff, 0x0, 0xffffffff00000001, 0x10001, 0x1, 0xfff, 0x3f, 0x9, 0x40, 0x7, 0x9, 0x4, 0x2, 0x0, 0x81, 0x9, 0x8, 0x3, 0x1, 0xfffffffffffff312, 0x6, 0x2, 0x666b73a6, 0x100, 0x0, 0xb8, 0x80, 0xbb19, 0x4, 0x9, 0x6, 0x80000000, 0x8001, 0xffff, 0x80000000, 0x0, 0x401, 0x5, 0x5, 0x3, 0x1, 0x7ff, 0x6, 0x8, 0x7fff, 0x80, 0x2, 0x6, 0x6, 0x8, 0x8, 0x5, 0x3, 0x20, 0x0, 0x6d7, 0x6, 0x9, 0x9, 0x7, 0x0, 0x1, 0x8, 0x9, 0x7, 0xc42, 0x0, 0xffff, 0x9, 0xffffffff7fffffff, 0x25]}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x10003, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x4, 0x0, 0x6, 0x2, 0x0, 0x7fff, 0x2000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x1ff}, 0x1100, 0x6, 0x40, 0x5, 0x1f00000000000, 0x2f9}, r3, 0xa, r5, 0x3) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() [ 882.695872][T23637] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:05 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x7, 0x5, 0x7f, 0xbe, 0x0, 0x9, 0x400, 0xa, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6776, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x40000, 0x7, 0x100, 0x8, 0x0, 0x3}, r2, 0xb, r0, 0xb) sched_setscheduler(r1, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fork() 11:07:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0xec0, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 882.972181][T23680] FAULT_INJECTION: forcing a failure. [ 882.972181][T23680] name failslab, interval 1, probability 0, space 0, times 0 [ 882.991315][T23683] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:05 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x6000, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:05 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x9, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:06 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x6558, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 883.830997][T23720] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 883.938794][T23680] CPU: 0 PID: 23680 Comm: syz-executor.2 Not tainted 5.12.0-rc4-syzkaller #0 [ 883.947682][T23680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 883.958058][T23680] Call Trace: [ 883.961924][T23680] dump_stack+0x141/0x1d7 [ 883.966298][T23680] should_fail.cold+0x5/0xa [ 883.970849][T23680] should_failslab+0x5/0x10 [ 883.975395][T23680] kmem_cache_alloc_node_trace+0x5a/0x2d0 [ 883.981789][T23680] ? __get_vm_area_node+0xd3/0x380 [ 883.987215][T23680] __get_vm_area_node+0xd3/0x380 [ 883.992197][T23680] __vmalloc_node_range+0xcb/0x170 [ 883.997348][T23680] ? kernel_clone+0xe7/0xab0 [ 884.002010][T23680] ? kernel_clone+0xe7/0xab0 [ 884.006725][T23680] copy_process+0x4c6c/0x7150 [ 884.012305][T23680] ? kernel_clone+0xe7/0xab0 [ 884.014263][T23761] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 884.016925][T23680] ? lock_chain_count+0x20/0x20 [ 884.029863][T23680] ? lock_chain_count+0x20/0x20 [ 884.034835][T23680] ? _parse_integer+0x132/0x180 [ 884.039725][T23680] ? __cleanup_sighand+0xb0/0xb0 [ 884.044700][T23680] ? kernel_clone+0x314/0xab0 [ 884.049407][T23680] kernel_clone+0xe7/0xab0 [ 884.053881][T23680] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 884.060061][T23680] ? find_held_lock+0x2d/0x110 [ 884.064846][T23680] ? create_io_thread+0x150/0x150 [ 884.069907][T23680] ? find_held_lock+0x2d/0x110 [ 884.074713][T23680] __do_sys_fork+0x8a/0xc0 [ 884.079167][T23680] ? kernel_thread+0xf0/0xf0 [ 884.084529][T23680] ? syscall_enter_from_user_mode+0x27/0x70 [ 884.090749][T23680] ? lockdep_hardirqs_on+0x79/0x100 [ 884.096167][T23680] ? syscall_enter_from_user_mode+0x27/0x70 [ 884.102198][T23680] do_syscall_64+0x2d/0x70 [ 884.106657][T23680] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 884.112598][T23680] RIP: 0033:0x466459 [ 884.116544][T23680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 884.136382][T23680] RSP: 002b:00007fb29aaac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 884.144829][T23680] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 884.152830][T23680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 884.160921][T23680] RBP: 00007fb29aaac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 884.168914][T23680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.177621][T23680] R13: 0000000000a9fb1f R14: 00007fb29aaac300 R15: 0000000000022000 [ 884.203201][T23680] syz-executor.2: vmalloc: allocation failure: 32768 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 884.233773][T23680] CPU: 0 PID: 23680 Comm: syz-executor.2 Not tainted 5.12.0-rc4-syzkaller #0 [ 884.242614][T23680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 884.252690][T23680] Call Trace: [ 884.255991][T23680] dump_stack+0x141/0x1d7 [ 884.260361][T23680] warn_alloc.cold+0x87/0x17a [ 884.265069][T23680] ? zone_watermark_ok_safe+0x2a0/0x2a0 [ 884.270762][T23680] ? __kasan_kmalloc+0xad/0xc0 [ 884.275593][T23680] ? __get_vm_area_node+0x292/0x380 [ 884.280835][T23680] __vmalloc_node_range+0x136/0x170 [ 884.286087][T23680] ? kernel_clone+0xe7/0xab0 [ 884.290713][T23680] copy_process+0x4c6c/0x7150 [ 884.295422][T23680] ? kernel_clone+0xe7/0xab0 [ 884.300035][T23680] ? lock_chain_count+0x20/0x20 [ 884.304989][T23680] ? lock_chain_count+0x20/0x20 [ 884.309876][T23680] ? _parse_integer+0x132/0x180 [ 884.314769][T23680] ? __cleanup_sighand+0xb0/0xb0 [ 884.319758][T23680] ? kernel_clone+0x314/0xab0 [ 884.324477][T23680] kernel_clone+0xe7/0xab0 [ 884.328932][T23680] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 884.334949][T23680] ? find_held_lock+0x2d/0x110 [ 884.339750][T23680] ? create_io_thread+0x150/0x150 [ 884.344825][T23680] ? find_held_lock+0x2d/0x110 [ 884.349626][T23680] __do_sys_fork+0x8a/0xc0 [ 884.354087][T23680] ? kernel_thread+0xf0/0xf0 [ 884.358756][T23680] ? syscall_enter_from_user_mode+0x27/0x70 [ 884.364783][T23680] ? lockdep_hardirqs_on+0x79/0x100 [ 884.370012][T23680] ? syscall_enter_from_user_mode+0x27/0x70 [ 884.375936][T23680] do_syscall_64+0x2d/0x70 [ 884.380490][T23680] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 884.386516][T23680] RIP: 0033:0x466459 [ 884.390434][T23680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 884.410682][T23680] RSP: 002b:00007fb29aaac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 884.419320][T23680] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 884.427419][T23680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 884.435420][T23680] RBP: 00007fb29aaac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 884.444294][T23680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.452304][T23680] R13: 0000000000a9fb1f R14: 00007fb29aaac300 R15: 0000000000022000 [ 884.575906][T23680] Mem-Info: [ 884.590065][T23680] active_anon:306 inactive_anon:375830 isolated_anon:0 [ 884.590065][T23680] active_file:7183 inactive_file:61423 isolated_file:0 [ 884.590065][T23680] unevictable:775 dirty:105 writeback:0 [ 884.590065][T23680] slab_reclaimable:17851 slab_unreclaimable:145402 [ 884.590065][T23680] mapped:61156 shmem:6177 pagetables:44373 bounce:0 [ 884.590065][T23680] free:835151 free_pcp:1186 free_cma:0 [ 884.652525][T23680] Node 0 active_anon:1196kB inactive_anon:1416796kB active_file:28476kB inactive_file:206208kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:244624kB dirty:400kB writeback:0kB shmem:22504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1124352kB writeback_tmp:0kB kernel_stack:33344kB pagetables:88448kB all_unreclaimable? no [ 884.746090][T23680] Node 1 active_anon:36kB inactive_anon:86544kB active_file:256kB inactive_file:39508kB unevictable:1556kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:44kB writeback:0kB shmem:2204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:38880kB pagetables:89016kB all_unreclaimable? no [ 884.844792][T23680] Node 0 DMA free:10856kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:2408kB active_file:0kB inactive_file:52kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 884.886568][T23680] lowmem_reserve[]: 0 2651 2652 2652 2652 [ 884.895291][T23680] Node 0 DMA32 free:46536kB min:37764kB low:46692kB high:55620kB reserved_highatomic:0KB active_anon:1184kB inactive_anon:1413872kB active_file:28280kB inactive_file:205764kB unevictable:1544kB writepending:400kB present:3129332kB managed:2721636kB mlocked:8kB bounce:0kB free_pcp:2276kB local_pcp:836kB free_cma:0kB [ 884.942246][T23680] lowmem_reserve[]: 0 0 1 1 1 [ 884.947220][T23680] Node 0 Normal free:8kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:4kB inactive_anon:620kB active_file:196kB inactive_file:392kB unevictable:0kB writepending:0kB present:1048576kB managed:1220kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 885.037825][T23680] lowmem_reserve[]: 0 0 0 0 0 [ 885.044686][T23680] Node 1 Normal free:3282852kB min:54168kB low:67708kB high:81248kB reserved_highatomic:0KB active_anon:36kB inactive_anon:86244kB active_file:256kB inactive_file:39508kB unevictable:1556kB writepending:44kB present:4194304kB managed:4117768kB mlocked:20kB bounce:0kB free_pcp:2460kB local_pcp:1412kB free_cma:0kB [ 885.085312][T23680] lowmem_reserve[]: 0 0 0 0 0 [ 885.093796][T23680] Node 0 DMA: 2*4kB (UM) 2*8kB (M) 1*16kB (M) 4*32kB (U) 3*64kB (UM) 0*128kB 1*256kB (U) 2*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 1*4096kB (E) = 10856kB [ 885.141125][T23680] Node 0 DMA32: 346*4kB (UME) 194*8kB (UME) 276*16kB (UME) 182*32kB (UME) 203*64kB (UME) 75*128kB (UME) 16*256kB (UME) 8*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 48056kB [ 885.170606][T23680] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 885.191923][T23680] Node 1 Normal: 1398*4kB (UME) 391*8kB (UME) 63*16kB (UME) 476*32kB (UME) 140*64kB (UME) 32*128kB (U) 12*256kB (UME) 6*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 789*4096kB (M) = 3283072kB [ 885.224966][T23680] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 885.245758][T23680] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=4 hugepages_size=2048kB [ 885.262209][T23680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 885.283135][T23680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 885.298843][T23680] 45449 total pagecache pages [ 885.303720][T23680] 0 pages in swap cache [ 885.308041][T23680] Swap cache stats: add 0, delete 0, find 0/0 [ 885.326157][T23680] Free swap = 0kB [ 885.335794][T23680] Total swap = 0kB [ 885.348016][T23680] 2097051 pages RAM [ 885.356495][T23680] 0 pages HighMem/MovableOnly [ 885.370369][T23680] 382918 pages reserved [ 885.374723][T23680] 0 pages cma reserved 11:07:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:07:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x33fe0, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:08 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x8100, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:08 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0xa, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:08 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x80000, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x122) r5 = openat(r4, &(0x7f0000000140)='./file0\x00', 0x2, 0xb3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r6, 0xc010f508, &(0x7f0000000000)={0x6, 0x80000001}) socket$key(0xf, 0x3, 0x2) fork() setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) 11:07:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 885.506359][T23776] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20000060, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:08 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0xb, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 885.683525][T23776] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:08 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xab0c, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x7ffff000, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x7640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:08 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0xc, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 886.073061][T23846] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 886.213416][T23883] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x5, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:09 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xf000, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:09 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0xe, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:10 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = getpgid(r1) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x1, 0x7, 0x0, 0x40, 0x4800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa6, 0x0, @perf_config_ext={0x8, 0x2}, 0x8200, 0x4, 0x800, 0x5, 0x0, 0x80000001, 0x286d}, r2, 0xd, r0, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) migrate_pages(r5, 0xff, &(0x7f0000000240)=0x2, &(0x7f0000000280)=0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0xe6, 0x9e, 0x7, 0x0, 0x0, 0x418, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xc02, 0x0, @perf_config_ext={0x80000000}, 0x43703, 0x3ff, 0x81, 0x7, 0x6, 0x0, 0xfc01}, r4, 0x2, r6, 0xa) fork() [ 887.372524][T23911] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:10 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xffff, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0xb, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 887.531591][T23960] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@private=0xa010101, 0x4e21, 0x1, 0x4e22, 0x0, 0x0, 0x1a0, 0x20, 0x28a394a5ff614d36}, {@in6=@ipv4={[], [], @loopback}, 0x4d3, 0x32}, @in6=@private2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17d577ee}, {0xfffffffffffffffa, 0x9, 0x4, 0x6}, {0x3f, 0xff, 0xa7}, 0x70bd2a, 0x3506}, 0x0, 0x8}}, 0xf8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x508, 0x0, 0xfffffffc, 0x0, 0x0, 0x7f}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x1) fstat(r3, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r4) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd28, 0x24dfdbfc, {{{@in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@private=0xa010101, 0x4e21, 0x1, 0x4e22, 0x0, 0x0, 0x1a0, 0x20, 0x28a394a5ff614d36, 0x0, r4}, {@in6=@ipv4={[], [], @loopback}, 0x4d3, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x13}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17d577ee}, {0xfffffffffffffffb, 0x9, 0x4, 0x6}, {0x3f, 0xff, 0xa7}, 0x70bd2a, 0x3506}, 0x0, 0x8}}, 0xf8}}, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x21820, &(0x7f0000000340)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}], [{@dont_measure='dont_measure'}, {@appraise_type='appraise_type=imasig'}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@measure='measure'}, {@uid_lt={'uid<'}}, {@fowner_lt={'fowner<', r4}}, {@seclabel='seclabel'}, {@appraise_type='appraise_type=imasig'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) lstat(&(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000047c0)={0x0, 0x0, 0x0}, &(0x7f0000004800)=0xc) r8 = geteuid() r9 = getegid() setgid(r9) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, &(0x7f0000004cc0)={&(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x7fffffff, {0x7, 0x21, 0x4, 0x240140, 0xbfd2, 0x9, 0x0, 0x200}}, &(0x7f0000000080)={0x18, 0x0, 0xffffffffffffff80}, &(0x7f00000000c0)={0x18, 0x0, 0x7ff, {0x5}}, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, 0xfb, {0x5}}, &(0x7f0000000140)={0x18, 0x0, 0x9, {0x7fff}}, &(0x7f0000000240)={0x28, 0x0, 0xfffffffffffffffe, {{0x3, 0x7, 0x1}}}, &(0x7f0000000280)={0x60, 0x0, 0x9, {{0x8000, 0x5, 0xa8e0000, 0x9cdb, 0x2, 0x1, 0xbf, 0x33f}}}, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x1}}, &(0x7f0000000340)={0x19, 0xfffffffffffffff5, 0x6, {'/dev/kvm\x00'}}, &(0x7f00000023c0)={0x20, 0x0, 0xfff, {0x0, 0x8}}, &(0x7f00000024c0)={0x78, 0x0, 0xd479cbd, {0xff, 0x0, 0x0, {0x3, 0x8da, 0xfffffffffffffffa, 0x7fff, 0x5, 0x8c4, 0x0, 0x81, 0x20, 0x2000, 0x8, 0x0, 0x0, 0x1f4b, 0x7fffffff}}}, &(0x7f0000002540)={0x90, 0x0, 0x8000, {0x5, 0x0, 0xc9, 0xfff, 0x800, 0x3, {0x6, 0x401, 0x400, 0x887, 0x9, 0xa, 0x8fd, 0x9207, 0x80, 0x4000, 0xa6, 0xee01, 0xee01}}}, &(0x7f0000002600)={0xc0, 0x0, 0x1, [{0x6, 0x9, 0x9, 0x1000, '/dev/kvm\x00'}, {0x0, 0x8fdc, 0x4, 0x0, '\'@/['}, {0x5, 0x8, 0x9, 0xbf, '/dev/kvm\x00'}, {0x6, 0x6, 0x9, 0x7fff, '/dev/kvm\x00'}, {0x5, 0x5}]}, &(0x7f0000004840)={0x348, 0x0, 0x1, [{{0x5, 0x0, 0x1, 0x1f, 0x80, 0x3, {0x1, 0x81, 0x1, 0x4, 0xffffffff, 0x2, 0x1a, 0x5, 0x5, 0x8000, 0x8, 0x0, r5, 0x13fb, 0x6}}, {0x3, 0x5, 0x9, 0xec1b, '/dev/kvm\x00'}}, {{0x0, 0x3, 0x40, 0x5, 0x10001, 0x5, {0x3, 0x8703, 0x7fffffff, 0x5, 0x0, 0x3, 0x2, 0x8, 0xfe, 0x8000, 0x80000000, 0x0, 0xee00, 0x1, 0x8}}, {0x4, 0x101, 0x9, 0x7fffffff, '/dev/kvm\x00'}}, {{0x3, 0x0, 0x10001, 0x9, 0x6aa, 0x5, {0x0, 0x1, 0x4, 0x2, 0x2, 0x3, 0x4, 0x3000, 0xc5, 0x82067bc3a9c88190, 0x1, 0xee01, r6, 0x7, 0x401}}, {0x0, 0x80, 0x9, 0x6, '/dev/kvm\x00'}}, {{0x0, 0x2, 0x3, 0x10001, 0x1f, 0xfff, {0x2, 0x88f, 0x4306, 0x20, 0x8, 0x401, 0x0, 0x2, 0xff, 0x1000, 0x0, 0xee01, r7, 0x9}}, {0x5, 0x7fff, 0x0, 0x80000001}}, {{0x4, 0x2, 0x7f, 0x3, 0x83, 0x1, {0x1, 0x0, 0xf8, 0x8, 0x0, 0x530e, 0x1, 0x0, 0x10000, 0xa000, 0x0, r8, 0x0, 0x3, 0x3}}, {0x5, 0x0, 0x9, 0x7, '/dev/kvm\x00'}}]}, &(0x7f0000004bc0)={0xa0, 0x0, 0x1f, {{0x5, 0x0, 0x3f, 0x5d, 0x1, 0x400, {0x4, 0x9, 0x7, 0x3ff, 0x94, 0xffffffffffffeb2f, 0x1000, 0x6, 0x8, 0xc000, 0x7, 0xee01, r9, 0x4, 0x4}}, {0x0, 0x8}}}, &(0x7f0000004c80)={0x20, 0x0, 0x2000, {0x100, 0x4, 0xb65a, 0xfffffffb}}}) fork() 11:07:10 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0xf, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x8640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x2, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:10 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x10, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:10 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ptrace$setregs(0xd, r0, 0x4, &(0x7f0000000000)="cb0942ad550e681d6f04c305d18dee5361ef1641d28c0d47979bcdd151c3cc52556354999dbb3bf985f610a7a9efe2a828cc1e40aae50f99b62445aec439171d9c1150c7c8a577823a8b6e2a46859d") ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() [ 888.089755][T24036] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:10 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x4001, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 888.336565][T24080] debugfs: Directory '24080-4' with parent 'kvm' already present! [ 888.351116][T24093] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:11 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x11, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 888.470711][T23988] debugfs: Directory '23988-5' with parent 'kvm' already present! 11:07:11 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 888.783317][T24120] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 889.052788][T24169] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = fork() sched_setscheduler(r2, 0x19e337aa26b39bec, &(0x7f0000000000)=0x1) 11:07:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioprio_get$pid(0x3, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:07:13 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x18, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:13 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x9640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:13 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:13 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x60, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:13 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() [ 891.080770][T24261] validate_nla: 1 callbacks suppressed [ 891.080789][T24261] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:13 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 891.353307][T24308] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 891.738179][T24209] debugfs: Directory '24209-5' with parent 'kvm' already present! 11:07:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x51, 0x0, 0x400, 0x314, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x800, 0x7ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x200}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0xc6443, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:07:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x2, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:14 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x2, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:14 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xa640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x6) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() [ 891.895279][T24385] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:14 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 892.021800][T24385] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xb640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:14 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x3, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 892.139131][T24383] debugfs: Directory '24383-5' with parent 'kvm' already present! [ 892.283932][T24449] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)=ANY=[@ANYBLOB="2800d800", @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x33) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x7a}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x39}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x69}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x4854}, 0x40000) sched_setscheduler(r0, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) fork() 11:07:15 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() tkill(r0, 0x2a) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:07:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() r3 = gettid() ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)={0x3}) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) syz_open_procfs(r3, &(0x7f0000000140)='smaps\x00') ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) tkill(r4, 0x24) capset(&(0x7f0000000040)={0x19980330, r3}, &(0x7f0000000080)={0x8, 0x23, 0x83f3, 0x8, 0x4548}) 11:07:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x3, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:15 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x4, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xc000000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:15 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) sched_setscheduler(r0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:07:15 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x4000000000000, 0xfffffffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)=ANY=[@ANYRES64=r3]) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r3}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000000c0)={0x0, r2, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000003c0)={r2, 0x40}) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) fork() [ 893.117432][T24538] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:15 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:16 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x5, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:16 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 893.385338][T24608] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x2, 0x1, 0x10000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) fork() 11:07:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xc640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:16 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 893.704868][T24627] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x4, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:16 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x6, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 894.042944][T24685] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x824c3, 0x0) dup(r1) sched_setscheduler(r0, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() 11:07:16 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:16 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x7, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 894.344869][T24694] debugfs: Directory '24694-5' with parent 'kvm' already present! [ 894.420809][T24548] debugfs: Directory '24548-5' with parent 'kvm' already present! 11:07:17 executing program 2: r0 = gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) ptrace$setregs(0xd, r1, 0x1, &(0x7f0000000080)="c9bf5bf58bcad0c02c94cf831cbff2d2931ac6b0409ddfe8a99054a535d8f2e2446861df0a561576dfa2614bb9627f3ea0f4eac575d4c5e3d73183042fe43ec53abb0794022a08801a9728ce") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x2, 0x0, 0xffffffff}, r0, 0x0, 0xffffffffffffffff, 0x2) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1, 0x0) tkill(r0, 0x8) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fork() 11:07:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x5, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xd640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:17 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:17 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x8, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:17 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000240)={{r2}, r3, 0xa, @unused=[0x9, 0x7fff, 0x80000000, 0x1], @subvolid=0x9}) [ 895.009116][T24723] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() [ 895.235492][T24730] debugfs: Directory '24730-5' with parent 'kvm' already present! 11:07:18 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x9, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 895.501144][ T9287] kworker/dying (9287) used greatest stack depth: 21808 bytes left 11:07:18 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) fork() 11:07:18 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x11}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:18 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xa, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:18 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x18}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 896.035283][T24786] debugfs: Directory '24786-5' with parent 'kvm' already present! 11:07:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x6, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xe640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:18 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xb, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:19 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x60}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:19 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x2, 0x1, 0x5, 0xea, 0x0, 0x80000000, 0xad806, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_config_ext={0x0, 0x8}, 0x1dae4, 0x4, 0xffff, 0x9, 0x2, 0x4, 0x4}, r1, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) fork() [ 896.365268][T24891] validate_nla: 3 callbacks suppressed [ 896.365288][T24891] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3f, 0x0, 0x0, 0x25, 0x0, 0x1, 0x421, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf5b8, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x800, 0xde8, 0x7fff, 0x6, 0xee, 0x0, 0xffff}, 0x0, 0x7, r2, 0x2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() r3 = fork() waitid(0x0, r3, &(0x7f00000000c0), 0x0, &(0x7f0000000240)) [ 896.540326][T24936] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:19 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xc, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:19 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xf0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x5, 0x0, 0x7, 0x28, 0x0, 0x1, 0x108, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x3, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x2, 0x3f, 0x4, 0x6, 0x0, 0x4, 0xac168, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x12}, 0x1410, 0xea, 0x2, 0x0, 0x46, 0x8000000, 0x11}) fork() 11:07:19 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xe, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 896.926646][T24956] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:19 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 897.189811][T25004] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x7, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:20 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000001600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r3, 0x5, &(0x7f0000000140)={0x2, 0x4, 0xc2b, 0x5, r4}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getpriority(0x1, r1) fork() pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat(r5, &(0x7f00000000c0)='./file0\x00', 0x202, 0xc2) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x8000, 0x1af, 0x0, 0x9c3400, 0x5, 0x10001, 0xfffffffffffff801, 0x7, 0x100000000, 0x5, 0x80000001, 0x4, 0x0, 0xf7, 0xa0c, 0x6], 0x1, 0x40}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) fcntl$getownex(r5, 0x10, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x2, 0x7f, 0x9, 0x4, 0x0, 0x8, 0xc0eb5, 0x6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x80, 0x9}, 0x200, 0x7ff, 0x4, 0x6, 0x1, 0x3f, 0x3ff}, r1, 0xc, r0, 0x0) 11:07:20 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x500}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:20 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xf, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 897.718466][T25022] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 897.917999][T25067] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$getregs(0xc, r2, 0x6c08, &(0x7f0000000000)=""/243) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:07:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x10640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:22 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x600}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:22 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x10, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@private=0xa010101, 0x4e21, 0x1, 0x4e22, 0x0, 0x0, 0x1a0, 0x20, 0x28a394a5ff614d36}, {@in6=@ipv4={[], [], @loopback}, 0x4d3, 0x32}, @in6=@private2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17d577ee}, {0xfffffffffffffffa, 0x9, 0x4, 0x6}, {0x3f, 0xff, 0xa7}, 0x70bd2a, 0x3506}, 0x0, 0x8}}, 0xf8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x508, 0x0, 0xfffffffc, 0x0, 0x0, 0x7f}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x1) fstat(r3, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r4) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd28, 0x24dfdbfc, {{{@in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@private=0xa010101, 0x4e21, 0x1, 0x4e22, 0x0, 0x0, 0x1a0, 0x20, 0x28a394a5ff614d36, 0x0, r4}, {@in6=@ipv4={[], [], @loopback}, 0x4d3, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x13}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17d577ee}, {0xfffffffffffffffb, 0x9, 0x4, 0x6}, {0x3f, 0xff, 0xa7}, 0x70bd2a, 0x3506}, 0x0, 0x8}}, 0xf8}}, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x21820, &(0x7f0000000340)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}], [{@dont_measure='dont_measure'}, {@appraise_type='appraise_type=imasig'}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@measure='measure'}, {@uid_lt={'uid<'}}, {@fowner_lt={'fowner<', r4}}, {@seclabel='seclabel'}, {@appraise_type='appraise_type=imasig'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) lstat(&(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000047c0)={0x0, 0x0, 0x0}, &(0x7f0000004800)=0xc) r8 = geteuid() r9 = getegid() setgid(r9) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="f49ac1acaa79a5e5054f24ec6a52f7372cf6b90ac805e9ad89039627611be1b28f614013c81418279d02aa7f146aced15792ac7d96a1fb86f8b062edd5157ab1088074d48faf99d37d5ada9691ef1368daeeb11b7931b19e13dc970fe9100015b603381d70907117f3b347d347f32cca4bf05b43533d3e6761ff73d0d2f467e930e75e1fd1870fec4a25cea0706301e10e2d1eb4bf42a7636545d1269fc850d1833bbfb7b46885355a2c553a080f89e5ee40c4a8292f192b0ea5883d3a067de4e4ab8d684aee4be066afa39d337b464b538234ad339ae823954023fa1b8cefb70e6d3e71f6348dcbb3501ed6d7610eb8246c0afbe99aefcc20ad40ffe51d14fe5a011ecbcd68c35a21e2b9f5e04ab965ab64c184d811bd2965a9dc0577d5f843f88752f7024974bb3dc32eabcf5f47a1936b290204d17203925a029809177da7fa19cebfa514a7000c7d46a8cb7b04f7722a6f03f85621198f00175e52f373ceb4abd7cc36af4a8d856e3ff5380aecf50cb7986b7aed613dd4d9ddf0197eb54a7928043b0f10bb6aba411eed51b0f21427964886c66129f481c165e6183a8846aa10a99900a35d2a3130a9ebdfe96ef61a7bb03585fadd4ef2696069a04cad42f626fa8c4590e2d731ad843980586191c6a66ccd8ec958635471e1a8a20d46050ff824063acbf93d12dcb2969510e84030be18db869bc84d1da13d835c0bf2ed8b183d401df3094cab9331bef9814a766912048b17ce5af0f628bcd52ebe6d749f3c889b2ff0d506f4208c4c18f19e06118bc4f547c44a20c774e439b28d4da5aae8f45d9a052f6b33f391f4146dd9a76a1ae895a7d880157060cf170a76e4f89134d71a7c9e3b2668b3ec81b1492ba0c46db5a0d21f5cd3901c96a01019bc7c574cca617f9215ff3f7f59f25ae74f0cdd25a69bdc0a96b41b1d2ef303cc61fb949c6bd8366035a74f5b57f6d52ca363355b2c23cab1427007c93f92fbdfff25fa539820c6f611d0013a3ca75ccd17f932526a4dc984f744d6a57e562ee741917824c63d559eb5a2882311520ba3ee54322dade349e22e5f82e403525fe6e16b7bef75cd440bd0227a73dc4693e6f0e12d4fc1676f371f17f134d16bc577652f21f77b4f7a63aec09f99c6ef50750ac0f6d4e9bb3618146a47171ba7d907a9ad734ffcbb29d58ffe71e64abc9bc0467111b4e3def789d24f1973f37712286c33a888e5b6fd6a33a2f72a55b062c3db905d53b8af2b3ac8a0d045b86456a98d23281765b8e946da9996bfc7650058bb4fe7814fcf33f296a75941176209d78e4a26abe54baf840ba23262c5f96f07c3d425039f642e5779c4a766b9a9ea49fa570e0c2862d2143ec8de46be779ce8d50bdc93bf120e2834e6a9df2a562511189021378d795d85eeb285f492cf0720fb6928c0ab8c9f7f933663ed09298d94ea9865dcc6ad87a60d608f2bcfe23bcedcfce62b25fbc72159c38cdadc7c934028e60727dc07f8520e50c5766d51c327082cd68dc50a18d2c60331814268fd977a19b91bda248630552647faaeb1b7c148da6b8c2a8256f223ad9fae69a6c78eadd18a4ff501d100d67de34b32edf85c9ed646ad14fd84575a29cbb400846ecf377bcce5efe89f0141bdc15c91d156f5af9fafed0dad7c3367a20d7bf87af34dfd6538dcdee9d5625ec99beb362cd0e37ff9640e408c2430997b030279cf7053005508fd1e1c036a7ee17894e86bf315eabfc5c4adfa822ee7cfe474e7cf9159642d58a7f43ea52328746503d1843d751ef5b6c8d26a84f33a09cfb4e8959b691c8f069499e1ecd426e292bae4df5530f81ff39100915fca171429cfbecac23bf3d7507f4cecf2d9f15bfdc8823949aa395a387174a58bf096e4f643cc9b3905b881509ccb1aa8ce744f2743d44d0bebecad4766fe2306b58fd80a4a4c0d97992dc3cae15a6f8e27149e207bf5fc8db86fdb214cb76539f018c7b1b4b7f8645e8cc0cec1fd8e603318fac391a451f978902e4fb6a12500b36b88d5dc046ad8ffa223eeaca837820c32d8885838943b39be0f1a1cbad673a7b1783d8e6248543d17288249c43ef657d290a659b2db934ce35da8c0ac4957cb0b4e2731f83f14803912d62a7d96415dc87e8eacdae7284ca94caea77728313ccb82b57d66db5cccbf44a09b1382ee90966c6c95ae579d5e3d4193a6f8c8396699ce494c63cf295087072b1bf4d2a59d92f55be8475ab29746d06b0f925b1526c09b3a281fa84b613a5b92c6ebd22b7aa21cd98813d4bc346fe141fb296a993b05d73d316d61e2f583518a0d1486ca13151f03da2c88db749613efefdc2290e7eba079fcf8883db59e7703fd53afb84741de3e1f067a1f6d8a624d93cc166027364a7b05f9a1e874914a492ada275555dab382838ebb2b21d90db0192fff29a6b9d287f2ff0022e90a495e101e8cd7492594c36f7b5ba5f3135dd59646489550809d45a6dd20abcbc7b04397a84c4b9889ccabb8024e34c420e8ffe3d8facaa8ffd6fa8726cd3426b2e1288d904c8a8f05676deca936bedbc62353e12738b2870c996ee5651eaa9db4453eb2c2fc32b847126231b757e4130f4cccd81676018d6d766a42b7d9b417c59e77604e377f3d9a259e0cac5d1d6957f123653070c6658472d0c11eae3dd8c47675dbdd163fc01e97912211c391da1477e38a9f7350e1283fefc1a4eec3ce4ce6933cdccffb8142e969fb3642327610d7e978a3df9f4f2b37210bbb4080d8eedbfe19ae74e4d4765e8d5052048cd422d8b1484de0dce52ee5fdcf90255459e4a3ef0a88bd273d44da4d7cee8cb892c42c951575577def11d7497a67e0b931b3e11fd325a77bae4a432fe9f8d6993bf91766e4bda900b7215ea9af23db4ed6e70e94a81a5a06fc80882f321b6107f336ccfee26304f43c0742f5d035fe73d503486d171f1d8f8518b2f221c0f86a8efb5c06ebfc19c83e076e435a70ccd81e25e677496f57d3ca0cfb23452ae0255d637446ee887f744ac050a204e80929dcaef78d37e71e005cd2f0077e18bb0d7a1a581c6ea3177cd88e67e4f5f13a1319e24092d85d4511e2d78327371c57860a9eb7f62597f2f5bb1d7d1188a481a46dd2a29dd54ace5a416b04c034df7875f0b930d7288348b0e9acb38ffbb235fa0f26ace6c5ce17f4f20432bf2a576c9aea6cd493cc2c18a412debdd746052b41570ac829e9c52e9ebecd4ff750f5874e44940174ebe985cfb2f8c648288ae04b2b864341400b12ffda6aa3e1386a4ffc28e49727c4a74301c0ce077a2e323e4a113c94dc1c6e3a4d19d0cab2712cdaf28733d9dfb460b56e10225d59cf416bc3323e3ef4ae3847b2510bb22745a9a590f80725c9504339ffd3a1068249135f07d73f8c01d73a120f79b12d3d4c3ba7e4f00001d9b56f9aa60df540d56c9dc358c1c0590adf6ad6cfc4ebf0999b4dd64e2366ae19a94e5fd37e5942c6df10d16f4ca91617455d163090e1bb8abee5c1ebfb5ff508ce461034deb33cc6dee31d5139662f0bb43ec208ce813ed5a1be44100e86093686381ff91d31f3f464191a3ae6d10010709b289ae6fb47b80d8938a2512ff340ccc8647dcaf6ef5ab29076603c1f931a2360cd5a451186169b2d16b56d04378b8e21e8f82dbf6873715dbfa8e1cbd3a2b081ce81459a1c8469bbebd00f3dd2aa5273ec2a5ff11a441a52e60ca56853ac045bdc63b854524651a6dba7bc49a422b25738fed3afb5624a21f77c77069ccde4ab4a35805cd0399eab1a523da33d6f64db2f4e16bca7fe724aaf7ce7386d18f8d3ff1fbebfe76196640752531ec64506f83214d6332e4b0a6825f47409def788002229df7a7c87f1bf352fd3c0ef049fc4d160f0e083c072c70f9e99f3ec2cf0ec476c06cfbbbbdf9af1976c92829eafccba9b97366633c7dbd25df24f19e194cb4902d0a1582a10bba025d99dc725a76290e4b7630dd05d8e2da674f4ccc98a9b22a6e9cfb6243a2b05661a6df6bb9d6b10b706f9a181c8d12825db19eafc5aa616dbfc5f7e93caddf8aa15b55f9fcfc925e15f0271638a95fd42dbd767bb6f8012aaf8afe86a3aa1a02aa0a7dd3e95892b8f5c7e9d7bd032f2062d008ae52ec55713687791edcd9a1e20600f2e607528ac0b0487d6fe6bdcf62c8fd18059de9f29491fe16e192a4c3c36b0c0172179ad410f421b19b7a3012839919213757d4eab831f895a74f5aff81dfb99d32e3bc200f6cae6fdc69b50c60d6e5fc1c63fb2d44b121e1dcffb19abff9e9acca19c8a92546246a52758a2f3b257c69d6108859c7e8688cf01809d2af5c4a068c230f39ec85b1268373ae22becceefb40c82be9221c573edcbb61e7929056afc9b0f9bcf015a26959508577d3fcc4979abf96073df3944cf42400ce136ace450713479a0330df053e2ade518de7b15c6d03af8640bdda7bb7fecc2384f71ce183383d4fedca1e70a9bfab001dc4a33c1009f62e470a0e29539a8e7e75f0a648b190617bd84d3d1ea034b8d42ffeb33b2dfe143a9f1a6210c40ba56ad056a617cd3cdcac9893a3926886b1159e29e036d1b7d5511fa6494626b5e7ea8e58335b4c5cdb54c7e33d4eba595ed2b6f249867b7d986f880529a1f9b71b5a303b0acce26a26e00eb07ba1c901aab9693380cb3c5749baa51144aa83b8c60f547d11e0ba45a3b9973b1b5d4d96aa6929effa397f1c3531c7e42d89a59f77011feacbef454d1541f820249336093c5bd131df297ec885708d5d115e1742ff9efe9d14fe72877b3fc0b159f78961e126ad386c5c6e43c7e7b70d4661b649e4d0af27b433a6d33cbdc1b6fea78180d1a69ad433e98a3cfa67ae7ab580c44c7ff161b4a40ee5f6baf1aea6a41645e0ad00dc379f561e6c01cf2b9e35264b4e1433757b54bd381a8062509f4188496d5b79988ddd11ceb54df75c13823a3602a0b3bf9897c4202a5a8e46d79010f339d5085d6e50d1be38a24c9b5f5c4c1b93fb30d8b7f52f8dce08691fc0828998a7767e132d53106adc6ccb820cc75d347dd56e14754502e2d73b6aaec6d2d014c3db59a86d9e49388f205bfb9fc0c29c98862c38e37d3d1d3b3c349e7643f9f35a9be7d7f5e6e853406a69f31a01f192f793ec55baee99433771aab6a1c773d391722ac47af6fb1f0ad13318393e4a1f93448082f73ef88f6d8da47d7823c9e5546ca3ad9e23050bd2bc5eca28f5db62e3787436e1740d9a83e9ea8d40d41ed149c443ee365c3ece7c0df8e532f3a84a46beb07b9a8ca669660605000a93635119af921b36c7b1c0e7a0c1202b0b09770590e060a57f605a0c052bc16a942be9e102be7852d4a7ce1658a1985500e3bb81a85b08f3b712721fa47a89c86dfc70c4682b3f9bf3132d9208977371d146954e1256d4c945204d3778f55f25af2fe3e5836397f4ac16cab8284b00f81cf9960cae69a1dbc8ea9603e3e84f28ee8b1bfb7b4d1e8269f8aab59ab449b8283da10ea4dc22e2b2d9527a30791a6ebbdaf34da10d2fe6862af09ce216cbfb4c4b2ca9a0d697d65bb130c2c4786e33867be0b9fc6e608d20be04b4af45889b01d9695c657c8e797d68422114b48eeecc3bd49f4f49a6061ae2d61ff46737ae9efb61d0e8b2d10334deb639bbceaa4f2a8d0a2b7d5bf8e7f6eafa315dcd02466c59bd35fa5ec9df7a7e94fd9562882ec28c9a48ac2bb4949ef99d4473a3a676eb687859e274732c61ba9e7917f7484c7b56c4689284829859c57e73eed008ceeeb94a8507dd9684593b3dae045926c50a1ab3f0b7aad4b1db03e58b3ec518d15fe5328499430c2fb8dc4115467f22911910336b050bc7f2bd771338507f479b750a1f173c43f513b1e7b6b31eba84cc41c0e5278cc7f975f31da5bf35b275d1cbe058d8bbc57264e968f22bf790dd9edb610f07f34934361f8430511eb0083ef6230466d63541edba4de940f93dcbdc94f523f5343d726551c0b8bc8b17ce90e05f23788ba50484af6e2a47caab18ff12729ce40bad2dd7fe43e9877cc407d8993a105eac004327d0865877d5cb35361041be19d997ececd48651515c6f9b7e0a257002cce31d38a2398d872f00e48a95cca23c9dc0aadf5b2036ac720d3a4be4b59d83191e2f0f4ec33b7488eedaac323fd2fa2713146e461a12de7f347431ce712044d118505422251feab6f03fbd0d39c6454311a5d0c786f299b6eed43384c4a1ebc60e0f7f052f86c7a2da47a597e5de77326beff826df89bf4a922c6612d70f077e61813ea640552ea494d81501afc5ec3c43ba2e8ba4112a770888fa98616dbd619514fd10b59824496de8e6ba021e7fb3f4b7bbd664f3740532e5e41a4603d8c15720354ea44ae925a5768a7be3acd485ab8b8aaf9ffb0c5e96a6654a4f1c3dbaa38379893f06adffeb078e4479e41cbd1c9d63d5e53af7cd6e66470f79ae139668016a5526a77605db5e57a9deb4bf5c62e9282b785971fe66af8375f79d9aef7ed3dfae0169e26b1c4c64c8fee11adf120625fa38f489319b3546f5ef75dd48e0e28eecdb07b840f75346ce58b9dc6085bcef4dbf79938e5d772b157593a8b9c63e078b66000a910f2b4f8a592d346058a6594483a37597bba9266ee27ad654d8f03923648d8e0871573670c6c7b6b253236c428bdb93f3cd6637fa34246f2f3863730accc967a9a999920acbdc72c92997c26433ede8a380f95de0d9294ac3a90869a39d18122e89ff37b50f6d80a0cadd2352e463809bab77427ac4bc589a080064e3a1cbf2ad3c2571c659470f76eed9a30dc980256e0819fda158e0ca520f0a47a1bf362425994afb3c337ee25118dd633b0dd3328dc47c4eb6dd57305450f7888645c0142d0755c1f612dba9481d46c2238798e6b672f4e59ee94d8d2b2239d6ac42b0da4476c15588b4095f6535ddc7054e2c5417dc755d6c3e6b76bf7dbe5f28db46a89472e81ce7c7b2317964958937c2027207cb5b000527dc46528f57e52c8ff82c647267db6641ec91e9694736533632fcb28ca325a7a10b98df02a7459162669294237a7371c0797770c5093af9fd5680467ddd1e66aca79270c8a8acf1fafb90c2eb369143bf506bb6b3a13f492d4c62b45ae0020eb406ebf232097363a803181573c088e240a0f89c54269c1904cc32fb2626bde33416a8949bebfa58a5edd98346fed40fcfd894bf09cad0bca5333b671b7d5531400c4049714e1c1785f6f8d8045ee83253b1ecebdfeba72881521ebad36ca0010240964ccb86cff12a3598c1bdf1496f82f60aa9b8961fcbd74a7e38aabdd0df26c79fb776a022edbcb4223f76342f3c20edb7e998a5e9d7724d350f43f65e048552a1a04d34439a91a47d9e5430140ee632ab5858b5521e110939b799b96dbadc1f2582dbf834015afe83f415c3718e617d7c2e9bf1f4f50af5f4f01b4e8ff90569333daedc94a109f7f79f61bd576793e107fb1721fd20a560934c6c11a583ce85b534a6ecd493c6bb54d41b8160d8d67ab94f159e4c0f4f4bf6d58babbacd16afd020ffd72158d27c65dc84c83179bfa6dfd23c6e402e369e915a8ca4dfbd290aac4db7736e6dd4c751c556433254aed0bd1b169491007b0692945f46c9bceeac4be4fc44cf48f473ff5ad04532f95801c775267e9499815f9390ebaba292404d4819a40047def20b700783a5fa144e1918a894d9eb30b0ff31e6abc4fafc93614218d1213c2f97967a4c6505fc70e03e9abef71f67db23786af08339cefd5c636ddd923f51a4deeb5db088ff4211b42b846b5092fd722dbf166079733fafe9e82ce9ecfb1ac04ba38a67d8283647ab36e297d3280456b37bffc2ea71c27f43da4397430c4e7d28c1c515a44777e760607f2e8bed301ad6b36dd187312911e47f59cbf65b2fae65d1d02a5fff1d8b468e10953a3ad11ebf62b2d3b9a32eee215227988ad9604b29c7618c912df89f1d84c15ffef6bc8bba377bbcb56851e66b9ac2ef149a084913831c0654e8290a6de748a00b885dd405277f15819e38770000a6535110c73a875ae2ea8fcfbb727ae50c51d484cced022d628b84d8d74a209e5299f6a0f16137b9c7364593f75ebe704d21f47859bd71b6414db90516feb1767b6645b7009200bc4a18f1cc9951f3571d2663a20b38ef5d24087e69ce78d953e2fb1b8380ba265fee8c9498af609da1c1c58fc6c29d1d70b2ce5e363cbbaa4ce72fdc16c2960b311a53f30e70a8b1ff32ac4ca52a5f7652896edf11f2540695e35b16bfee9b095ab783a4f8cf9a8f50ade5bdeb503aa46ac1eb78dff822f479cbcf61cedbdb16a6f22491011ab2cf294d4eba77fa05bbcd13ddae36a1b724c2c9684cc38a73370f0b873e1631386124d9d87d60a947851a68a7b21fa54faa3e0848773cd120406b0403edc317e81ddfe2e2c1a14efdd918b57f8f6f7cd47d1732c3c532e291a463f2c8deb73d861adda9792e87a16c67ca5e268d0f40e60b0a553966b3b14e3161112192fc0e6f0088fba1d4da5091e1a45d25c4946ee9af3b70b126ab80fd445f54a7ae687e1c81f20c77d4f6c441a968469a419f9532c1dfbaa2e6bbf66a2387bd17d44aa72cea350bde3f33f1e61e6621ad8dc20bdd1c1fccc4dbae49f94ad413125e1123b67f8b0143fe14221c4a1fcb20f6e4a8a972bc3a8ad0d8bb9bee2ec29a13af279359d7119ef766258f571669eca653805e9d02c0904af8f512d780d2c815261e1227a3e145557cde6136a4e092c8673825a7bae0c033ad1f1f296534b8a6dfaaebcdcac33273585b8083034ecda71ca1394a45786dbc21ec78c53aa5469d880e8a693e6721ba81ceacc92020a83130ada920ddbcce1326d0c4ff83d0b30ea619aecd43aa60c1b497c675a08692bfcb630e7fb6ec5cc29c14d7ecc48edce57006d9ceab8d4535f398932ab6eae98085a29eaad48bf318c6580bfb70ae8c2e38ee43a31ef1af2b4079781074d5761ceb49589365ab41954fc5f2a2587f136a2713ff2429363076d6d729466edc817c1c9a0d1a52861cd77ece586c389c5fb99645365b3471ca51a365d91c90fd20d0406ac1e040f6eda5ba0c20b0616a6ceb26fc425dcfaf1d3565587b7550efb1da177a24a81afef7f54417d7cbee28959b87f1c77655a0aebb83e7b379fb50ad989ef29f65898a35014f2372278527efdec1df6062878422e5b627a835d908437d4f4f234d22a6a3e544f505bbd4a75ece72791ecdfaa63a2ebc7e65df682b92c2b3e5b3ecc58c21ad92e4e82189a47465c7b380ee5299adfe1199fde0a2341e4c625483f1016f528828854cf71d7fc9a0be1bcd7c545dba7aca32bfd659972b8b7f2ee94e08586862ec8ebad9219668621b4a59d19f17702be5d1b7a6ff8e43b7d900c32a94ea6cdbf7d41b88ab068af9fa391bff16ca6b03abb067c0a2c2edef5ed9170605e76886481d9960d9b8c17b777d5506fc1f3621a7902a86d20ee82ee6f408521a948abb7f5e934f88734dd2fddde9afa96eed0c275061f7871f2f7a34316473a0e08187772fd5e23c95644cc0325c66772871ab26de8a889161ce335f206c732327cf2bdad90f2918912d699b5166d73e77fc20c3a63baaac676fc5f69820c9aecad9e74dcba7cb0420c2627d9fb38eb0080f79f91377eb70475b8106f0fdc656b055dfea8a6f2895f8d1a64afccdc2582329d456d54e6d17b5a10a4e573c9b291260e15b8f3243a70ca5d1952dec2cf8691a2d0aa3045b6fc44623c529ba00bdebda1c30bdce8c35dc73c3ceb2df6eb7ea1050748afec273849700ac98d3f08b09e3316bb7bbe86f2ef126dd928c3607b512b90fb02e0e364fc5acc4c010baa23da475e79a328305f5791f32e61831984b1b6192a8a5022c09ff6a6cfae84c35b6366bda8fcc9a93e6d8b5bf6a8ca8f57b3234fd403c76df6d65b4a782229d6d54de2bb7479eebe2fe5ce53f917e3c22405d3474464e5018da7b34e3bff971c6267d3048ab6219d33202f7c7be0e767a5d866dcef135932bb1c951550d054d08e5095ead7b4b0d1350162d506753855a89960c0782c04830e97610e57e49f0790c186ec95c812314767423735d25274163411d5fb16eaa6f49df59c7590ab1b91a06bd01e2d48e0fd42a0de746080caa6be9ebb63eae60c04418e61842a3d0de0a7248e5b1821c424d35451c6a05385e3584bd641b8e058f9aba6045b6e0849e6017ff47ba995f94aea1e0f71ea1afd212599a47af41320149ad52100610bd1c05271345ae314018a6f3e99388f9ff0690c9e21c42407f6d71c6279ed67082905df18a4286a1062fa0d8dd320c891ebca38675cbd1de60fadb1d33d947f398d0ad0bdc931785d6d356ad6902cd6f92d0b3329490aa92f938f2bc37293c21bf56fbd4fd8da4d372389ffe8983b1737c658a90302d27f3ec6ee193754dccea86ad19a560d506abd8e95e5301625c457868753cec04f4f72d9a844c6abb9426d3f21b4a8ee9077c62cb21ac4cf97ad7bab9b8940fd089ce54d56b5520fed51c6eccf03bc4661557346991ea53d2e614fc03f7dec91e342ea9c1f34773ac58f53e5abf26d04ca65f3502256c5f9e21e3d8fdb89d12a24c060923dad2670ab12f6f9bac3e9a48162b770e851d6c04ff74c8a73c659bae3470a4d4afb7908277898508f9c22599d82abfae5ea893ba1b0c8847a316f14a6094d745e54d9dad42c73b4c51196e100e54e46663ea5029f1799bd3ec1e9e853819b1e0c2c10a63fb099559171f1d246d4536d001b87b91a5e5172a8930d23dba1bb2df9e44a61ba64ee0d133b64787bc13e6dabbc6c306cbf90cd70a5e29b72366b4a3549336c15bce1baed5b57587771eda6f9d7c0418ca0aa121888919802eaaa8148483014a0eb7e0afc307417b2b86e1a4fb88b598526a66e852fc3347365d981ddfb2dfc21cd69e081c66a8159f5733204616bad0d1703691abdc7681ab40ce7ed18f33a898e39ce304659f0586da15ed5de8b9bd12cdc9cb7597e4c8e686ebcb176b25bea8d042d319754b5d2050b2e209f4d3fa87bfd7ca8da7364117edaa5a58ceee5a9aaf9af85fa25eabd3c03975e7d644ac5ee2995da5fb611d5130663e03c60a563abe85910aff543cb6783258e4ac64936dfa103613093b5f64dca2a8a6294742023875752c137358dec03b53a87b86a294c50b8457a97219562d0eb1f7ffa00b0a54d9b9d2e6e1314cfa3a1b40cda5f430feaeced17a46202a6047cd1bc495404a7961ad067606be6390d338131e16b2cd7b2d7b300334697f07f5c33860d67282e907808dc3d139f30f46f660d1152c17953f0334f86bad1ccce1c76ca0c25f07a57251dc2ab58e0e0e0bf01b1e88ae80539d5587143628d3dbbf71328ee78ec9718aca073a0e0a202ae08da57b4e1bc3a4d44ab1e2837f7bda12a6398da12cffb60a86e16de3dca04cffdfc6a85d103e739d438572449ab1ecf414485ed0f5cbbe7e458c30337738d83eeb4b6fcb09caf365b20696ad98bd6b4cd200853edc1ce2f309f848a3138a247b015149e3625e9a70288c2d5de3fdb60620a14628c969d0016cadc5c9706e3a8372ac5819a1849638b5d8616c195afeeaf", 0x2000, &(0x7f0000004cc0)={&(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x7fffffff, {0x7, 0x21, 0x4, 0x240140, 0xbfd2, 0x9, 0x0, 0x200}}, &(0x7f0000000080)={0x18, 0x0, 0xffffffffffffff80}, &(0x7f00000000c0)={0x18, 0x0, 0x7ff, {0x5}}, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, 0xfb, {0x5}}, &(0x7f0000000140)={0x18, 0x0, 0x9, {0x7fff}}, &(0x7f0000000240)={0x28, 0x0, 0xfffffffffffffffe, {{0x3, 0x7, 0x1}}}, &(0x7f0000000280)={0x60, 0x0, 0x9, {{0x8000, 0x5, 0xa8e0000, 0x9cdb, 0x2, 0x1, 0xbf, 0x33f}}}, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x1}}, &(0x7f0000000340)={0x19, 0xfffffffffffffff5, 0x6, {'/dev/kvm\x00'}}, &(0x7f00000023c0)={0x20, 0x0, 0xfff, {0x0, 0x8}}, &(0x7f00000024c0)={0x78, 0x0, 0xd479cbd, {0xff, 0x0, 0x0, {0x3, 0x8da, 0xfffffffffffffffa, 0x7fff, 0x5, 0x8c4, 0x0, 0x81, 0x20, 0x2000, 0x8, 0x0, 0x0, 0x1f4b, 0x7fffffff}}}, &(0x7f0000002540)={0x90, 0x0, 0x8000, {0x5, 0x0, 0xc9, 0xfff, 0x800, 0x3, {0x6, 0x401, 0x400, 0x887, 0x9, 0xa, 0x8fd, 0x9207, 0x80, 0x4000, 0xa6, 0xee01, 0xee01}}}, &(0x7f0000002600)={0xc0, 0x0, 0x1, [{0x6, 0x9, 0x9, 0x1000, '/dev/kvm\x00'}, {0x0, 0x8fdc, 0x4, 0x0, '\'@/['}, {0x5, 0x8, 0x9, 0xbf, '/dev/kvm\x00'}, {0x6, 0x6, 0x9, 0x7fff, '/dev/kvm\x00'}, {0x5, 0x5}]}, &(0x7f0000004840)={0x348, 0x0, 0x1, [{{0x5, 0x0, 0x1, 0x1f, 0x80, 0x3, {0x1, 0x81, 0x1, 0x4, 0xffffffff, 0x2, 0x1a, 0x5, 0x5, 0x8000, 0x8, 0x0, r5, 0x13fb, 0x6}}, {0x3, 0x5, 0x9, 0xec1b, '/dev/kvm\x00'}}, {{0x0, 0x3, 0x40, 0x5, 0x10001, 0x5, {0x3, 0x8703, 0x7fffffff, 0x5, 0x0, 0x3, 0x2, 0x8, 0xfe, 0x8000, 0x80000000, 0x0, 0xee00, 0x1, 0x8}}, {0x4, 0x101, 0x9, 0x7fffffff, '/dev/kvm\x00'}}, {{0x3, 0x0, 0x10001, 0x9, 0x6aa, 0x5, {0x0, 0x1, 0x4, 0x2, 0x2, 0x3, 0x4, 0x3000, 0xc5, 0x82067bc3a9c88190, 0x1, 0xee01, r6, 0x7, 0x401}}, {0x0, 0x80, 0x9, 0x6, '/dev/kvm\x00'}}, {{0x0, 0x2, 0x3, 0x10001, 0x1f, 0xfff, {0x2, 0x88f, 0x4306, 0x20, 0x8, 0x401, 0x0, 0x2, 0xff, 0x1000, 0x0, 0xee01, r7, 0x9}}, {0x5, 0x7fff, 0x0, 0x80000001}}, {{0x4, 0x2, 0x7f, 0x3, 0x83, 0x1, {0x1, 0x0, 0xf8, 0x8, 0x0, 0x530e, 0x1, 0x0, 0x10000, 0xa000, 0x0, r8, 0x0, 0x3, 0x3}}, {0x5, 0x0, 0x9, 0x7, '/dev/kvm\x00'}}]}, &(0x7f0000004bc0)={0xa0, 0x0, 0x1f, {{0x5, 0x0, 0x3f, 0x5d, 0x1, 0x400, {0x4, 0x9, 0x7, 0x3ff, 0x94, 0xffffffffffffeb2f, 0x1000, 0x6, 0x8, 0xc000, 0x7, 0xee01, r9, 0x4, 0x4}}, {0x0, 0x8}}}, &(0x7f0000004c80)={0x20, 0x0, 0x2000, {0x100, 0x4, 0xb65a, 0xfffffffb}}}) fork() 11:07:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x8, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 900.221226][T25093] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 900.479125][T25143] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:23 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x11, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:23 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x700}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x11640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:23 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x18, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 900.829309][T25160] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:23 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x900}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x12640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 901.315700][T25208] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 901.422178][T25230] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:24 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xfffffffc, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x8, 0x5, 0x7, 0xff, 0x0, 0xff, 0xc20, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_config_ext={0x27, 0x1}, 0x2000, 0x40, 0xffffffb5, 0x0, 0x8, 0xea1, 0x7df}, r1, 0x7, r0, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = fork() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r3, 0x12) 11:07:24 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x60, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:24 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xa00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x9, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:26 executing program 3: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b00010000000009527b7f0003dbcc7a0000058513"], 0x0) 11:07:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x13640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:26 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:26 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0xe, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:26 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@private=0xa010101, 0x4e21, 0x1, 0x4e22, 0x0, 0x0, 0x1a0, 0x20, 0x28a394a5ff614d36}, {@in6=@ipv4={[], [], @loopback}, 0x4d3, 0x32}, @in6=@private2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17d577ee}, {0xfffffffffffffffa, 0x9, 0x4, 0x6}, {0x3f, 0xff, 0xa7}, 0x70bd2a, 0x3506}, 0x0, 0x8}}, 0xf8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x508, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x1) fstat(r4, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f80000001600010028bd7000fcdbdf25ac1414380000000005000000000000000a0101010000000000000000000000004e2100014e2200000000a02036000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000000000000000ffff7f000001000004d332000000fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee77d517000000000000000000000000faffffffffffffff0900000000000000040000000000000006000000000000003f000000ff000000a70000002abd7000063500000000000000000000000000000000000008000000"], 0xf8}}, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x21820, &(0x7f0000000340)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}], [{@dont_measure='dont_measure'}, {@appraise_type='appraise_type=imasig'}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@measure='measure'}, {@uid_lt={'uid<'}}, {@fowner_lt={'fowner<', r5}}, {@seclabel='seclabel'}, {@appraise_type='appraise_type=imasig'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x9, 0x1, {r1}, {r5}, 0x1000, 0x1}) r6 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x5, 0x5d8f82) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x4, 0x2, 0x2, 0x4, 0x0, 0x7ff, 0x80, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x8000, 0x1, 0x95, 0x0, 0x1, 0xf05, 0x7f}, r1, 0xb, r6, 0x9) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x5, 0x0, 0x31, 0x6, 0x0, 0x4, 0x802, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3b3, 0x1, @perf_bp={&(0x7f0000000040), 0xe}, 0x60210, 0x43c, 0xfffffff8, 0x5, 0x100, 0x3, 0xe1}, r8, 0x2, r0, 0xcbf4e0c267ee247f) sendfile(r0, r7, &(0x7f0000000000)=0xffffffff, 0x20) fork() [ 903.429168][T25283] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:26 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xc00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 903.630723][T25334] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:26 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x10e, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 903.798910][T25250] usb 4-1: new full-speed USB device number 2 using dummy_hcd 11:07:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x14640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:26 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xcab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:26 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x300, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 904.075902][T25387] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 904.179230][T25438] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 904.221081][T25250] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 11:07:27 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 904.280681][T25250] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 904.509988][T25250] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 904.530170][T25250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.538342][T25250] usb 4-1: Product: syz [ 904.573658][T25250] usb 4-1: Manufacturer: syz [ 904.578591][T25250] usb 4-1: SerialNumber: syz [ 904.623096][T25250] usb 4-1: config 0 descriptor?? [ 904.724027][T25282] debugfs: Directory '25282-5' with parent 'kvm' already present! [ 904.874030][T25250] usb 4-1: USB disconnect, device number 2 11:07:28 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@private=0xa010101, 0x4e21, 0x1, 0x4e22, 0x0, 0x0, 0x1a0, 0x20, 0x28a394a5ff614d36}, {@in6=@ipv4={[], [], @loopback}, 0x4d3, 0x32}, @in6=@private2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17d577ee}, {0xfffffffffffffffa, 0x9, 0x4, 0x6}, {0x3f, 0xff, 0xa7}, 0x70bd2a, 0x3506}, 0x0, 0x8}}, 0xf8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x508, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x1) fstat(r4, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f80000001600010028bd7000fcdbdf25ac1414380000000005000000000000000a0101010000000000000000000000004e2100014e2200000000a02036000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000000000000000ffff7f000001000004d332000000fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee77d517000000000000000000000000faffffffffffffff0900000000000000040000000000000006000000000000003f000000ff000000a70000002abd7000063500000000000000000000000000000000000008000000"], 0xf8}}, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x21820, &(0x7f0000000340)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}], [{@dont_measure='dont_measure'}, {@appraise_type='appraise_type=imasig'}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@measure='measure'}, {@uid_lt={'uid<'}}, {@fowner_lt={'fowner<', r5}}, {@seclabel='seclabel'}, {@appraise_type='appraise_type=imasig'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x9, 0x1, {r1}, {r5}, 0x1000, 0x1}) r6 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x5, 0x5d8f82) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x4, 0x2, 0x2, 0x4, 0x0, 0x7ff, 0x80, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x8000, 0x1, 0x95, 0x0, 0x1, 0xf05, 0x7f}, r1, 0xb, r6, 0x9) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x5, 0x0, 0x31, 0x6, 0x0, 0x4, 0x802, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3b3, 0x1, @perf_bp={&(0x7f0000000040), 0xe}, 0x60210, 0x43c, 0xfffffff8, 0x5, 0x100, 0x3, 0xe1}, r8, 0x2, r0, 0xcbf4e0c267ee247f) sendfile(r0, r7, &(0x7f0000000000)=0xffffffff, 0x20) fork() 11:07:28 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x500, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x15640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:28 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xf00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x60, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() [ 905.473042][T25475] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 905.678567][T25530] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:28 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1100}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:28 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x600, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x16640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 906.009600][T25549] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:28 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1800}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:28 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x700, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 906.130653][T25484] debugfs: Directory '25484-4' with parent 'kvm' already present! [ 906.203888][T25484] debugfs: Directory '25484-5' with parent 'kvm' already present! [ 906.231613][T25601] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:29 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x900, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:30 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x20, 0x68, 0x5, 0x5, 0x0, 0x80000001, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xdfb, 0x4, @perf_bp={&(0x7f0000000000), 0xebe2879f548229ee}, 0x200, 0x5, 0x5, 0x1, 0x86, 0x5, 0x7ff}, r1, 0xa, r0, 0x3) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = gettid() r5 = gettid() sendmmsg$unix(r3, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x500, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x70}], 0xfd, 0x0) 11:07:30 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x5865}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x17640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:30 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xa00, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x300, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x805, 0x0, 0xfffffffc, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x100, 0x70bd27, 0x25dfdbfd, {0x2, 0x14, 0x80, 0xf2, 0x0, 0x0, 0xfd, 0x4, 0x800}, [@RTA_UID={0x8, 0x19, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x24000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() 11:07:30 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x6000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 907.422622][T25632] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:30 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xb00, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:30 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x6558}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x18640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:30 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xc00, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:30 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) poll(&(0x7f0000000140)=[{r0, 0x4002}, {r2, 0xa203}], 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000001c0)={0x1, 0x0, 0x1000, 0x86, &(0x7f0000000080)="7a0b41ec2b700d965cef05a2eecc67258ca9f03a43a916d6c1a777b63cf0a3b6b7d24ff1e93cd80f1146ebf55d7badd3113dcea3cb702135acfe334dfab0b2cdcc2b38c9fe4372f409d47d8cf70a6066f66cc8949044d3437e4490dfa554c466c796353ec4afacbb1f4e69741afb0bfd31ff95cd13e47c714a4850c2ed85c1615af2fe8e05d8", 0x0, 0x0, 0x0}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 908.075174][T25687] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:30 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x8100}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 908.249680][T25728] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 908.265401][T25633] debugfs: Directory '25633-5' with parent 'kvm' already present! 11:07:31 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xe00, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x19640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:31 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) poll(&(0x7f0000000140)=[{r0, 0x4002}, {r2, 0xa203}], 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000001c0)={0x1, 0x0, 0x1000, 0x86, &(0x7f0000000080)="7a0b41ec2b700d965cef05a2eecc67258ca9f03a43a916d6c1a777b63cf0a3b6b7d24ff1e93cd80f1146ebf55d7badd3113dcea3cb702135acfe334dfab0b2cdcc2b38c9fe4372f409d47d8cf70a6066f66cc8949044d3437e4490dfa554c466c796353ec4afacbb1f4e69741afb0bfd31ff95cd13e47c714a4850c2ed85c1615af2fe8e05d8", 0x0, 0x0, 0x0}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 908.591753][T25742] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x500, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:31 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xab0c}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:31 executing program 2: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0xff, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x20d4, 0x0, 0xbffffffc, 0x8}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = getpgid(r0) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_open_procfs(r0, &(0x7f0000000080)='net/packet\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x102, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fork() pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x10003, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/28, 0x1c}, {&(0x7f0000000140)=""/99, 0x63}, {&(0x7f0000000240)=""/92, 0x5c}, {&(0x7f00000003c0)=""/252, 0xfc}], 0x4, 0x0, 0x883e) 11:07:31 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) poll(&(0x7f0000000140)=[{r0, 0x4002}, {r2, 0xa203}], 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000001c0)={0x1, 0x0, 0x1000, 0x86, &(0x7f0000000080)="7a0b41ec2b700d965cef05a2eecc67258ca9f03a43a916d6c1a777b63cf0a3b6b7d24ff1e93cd80f1146ebf55d7badd3113dcea3cb702135acfe334dfab0b2cdcc2b38c9fe4372f409d47d8cf70a6066f66cc8949044d3437e4490dfa554c466c796353ec4afacbb1f4e69741afb0bfd31ff95cd13e47c714a4850c2ed85c1615af2fe8e05d8", 0x0, 0x0, 0x0}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:31 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xe01, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x1a640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 908.994804][T25793] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:31 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xf000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:31 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xf00, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:31 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) poll(&(0x7f0000000140)=[{r0, 0x4002}, {r2, 0xa203}], 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000001c0)={0x1, 0x0, 0x1000, 0x86, &(0x7f0000000080)="7a0b41ec2b700d965cef05a2eecc67258ca9f03a43a916d6c1a777b63cf0a3b6b7d24ff1e93cd80f1146ebf55d7badd3113dcea3cb702135acfe334dfab0b2cdcc2b38c9fe4372f409d47d8cf70a6066f66cc8949044d3437e4490dfa554c466c796353ec4afacbb1f4e69741afb0bfd31ff95cd13e47c714a4850c2ed85c1615af2fe8e05d8", 0x0, 0x0, 0x0}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 909.287010][T25785] debugfs: Directory '25785-5' with parent 'kvm' already present! 11:07:32 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:32 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x1b640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 909.521609][T25850] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 909.664301][T25888] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x600, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:32 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) poll(&(0x7f0000000140)=[{r0, 0x4002}, {r2, 0xa203}], 0x2, 0x2) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:34 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:34 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x1800, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x1c640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:34 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$xdp(0x2c, 0x3, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x700, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1618, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffd, 0x9}, 0x0, 0xf, r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00007e0000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000014c0)) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() [ 911.457097][T25947] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:34 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:34 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x1d640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:34 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:34 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x5865, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 911.930015][T25997] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:34 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 912.126402][T26039] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:34 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:34 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x6000, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:35 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x1e640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 912.487244][T26056] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x900, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 912.681657][T26091] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 913.423117][T25952] debugfs: Directory '25952-6' with parent 'kvm' already present! 11:07:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_setscheduler(r2, 0x6, &(0x7f0000000040)=0x4) 11:07:36 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:36 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:36 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x6558, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x1f000000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 913.625661][T26119] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:36 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:36 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x8100, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:36 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 913.838458][T26160] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0xe00, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x1f640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:36 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xf000, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:36 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 914.199671][T26179] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace(0x4208, r2) 11:07:38 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:38 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xffff, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:38 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x20000000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x2000, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 915.777688][T26259] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:38 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:38 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 916.087404][T26308] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:38 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x20640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:39 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 916.468270][T26325] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:39 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 917.025368][T26264] debugfs: Directory '26264-5' with parent 'kvm' already present! 11:07:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000100)=0x4) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x446800, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="660f3805dc0f001b0f22250f01c83e0fddfa66b9c20b000066b80030000066ba000000000f30b8f4000f00d82e0f23290f20e06635000100000f22e0f2e003", 0x3f}], 0x1, 0x3, &(0x7f00000000c0)=[@dstype0={0x6, 0x7}, @cr0={0x0, 0x20010004}], 0x2) fork() 11:07:39 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:39 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x21640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x4000, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:39 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 917.210791][T26391] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:40 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:40 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:40 executing program 2: ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @random="02000100", 'ipvlan1\x00'}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8001, 0xfffffffc, 0x0, 0x0, 0x7471}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x2, @remote, 'ip6gretap0\x00'}}, 0x1e) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() socket$inet_udplite(0x2, 0x2, 0x88) [ 917.475645][T26431] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:40 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x22640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:40 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:40 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 917.812226][T26449] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:40 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 918.056397][T26497] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:40 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x23640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 918.413747][T26512] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x6000, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:41 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:41 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 919.957843][T26443] debugfs: Directory '26443-6' with parent 'kvm' already present! 11:07:42 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:42 executing program 2: sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4008840) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000000)=0x100) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:07:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x24640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:42 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x200000, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 920.196120][T26586] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:43 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x11}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 920.493112][T26633] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:43 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:43 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:43 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x18}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x25640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:43 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 921.004836][T26691] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 921.206106][T26733] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 921.376836][T26593] debugfs: Directory '26593-5' with parent 'kvm' already present! 11:07:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x80, 0x2, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) ioctl(r3, 0x80000001, &(0x7f0000000000)="25e860b23198fbc825b915eb3a613beb0851b96e155adbe368c6f371a0753643ed89fcdeb6c1d8ec25ce3d3b57f7187e9a9fda896e0c95cc049007b05ad43cf4d856dd5b477f2f5852cc4c3cd24fd5daa1c26f78099e8f38b876a37ced02f8fcdf5605e66bee05256effb6b61c728f2029a8e7c525f325c53f2ef4460f8a8da56696d8581d07f83fd5cb0e20b628d28e0e7fb3b18499353c4f9b8086368038fbe889ca93faf9954f48a0427b04f2bf5b2d0ffb19513dd96c0fa4934ce2b92d3e373c554dd5ff9ff1") ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:07:44 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:44 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x60}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:44 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x26640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x1000000, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 921.847274][T26754] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:44 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:44 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:44 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 922.056293][T26799] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x27640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:45 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:45 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 922.570633][T26816] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 922.860688][T26758] debugfs: Directory '26758-7' with parent 'kvm' already present! 11:07:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', r4) fork() 11:07:46 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:46 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:46 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x500}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x28640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x2000000, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 924.354317][T26892] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:47 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:47 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x600}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x29640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:47 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:47 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x700}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:47 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 924.945392][T26957] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 925.144693][T26992] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000000, 0xfffffffc, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000540)=0x3) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000040)="e9637f285973b6c4f1166d4b70e6f9b9d149030db926104a4c6785e473c3d5a3333e47fc78fa60a3d27f33bfe06cba7e61638919e3485a364e7c2a4fd6a823489b67bc515104e1827adefc4346d1925a2840c802b19cf0b269983ff477bc6df4c0e42ad0b28dc8239c0d175fa542552f011e91de9445b61ac1caeeb9e781158ed38bc26ddb6f9b780ff755b98d057a0b6e4bf382bff4624f74aed76ffdef011d27b1958d56b90aebe318e2f315793d3e152232e8f9c179da3393a0517a6cc1a1719f0dd89f9ff19c878f68f25c7bcc1588ef2768b1bc8f7120af87f2d9675e44a20845598cbd13d77d700caeb3f5a2dcf9c37a7eaa1fd1c413f6f1ad49b5", 0xfe}, {&(0x7f0000000140)="d10e0cc9d210da8f49414c584e494771d23864842c4e7931534e2c2771", 0x1d}, {&(0x7f0000000240)="1a702e63e260a7533ef71d1ee4a34ac46327a59afbf118d169956edefdbecbd40ffd8f60eef9dded258a17defe2fbdc55b681ed10720ba06c309633c08f5d985957f7d09e09cb6254c677a21e6869288764f03833669f8522031156be73f714743047ade58805073510c2e876ac3467578e33b650a349fa017023a952fde2d27a252df07db236646d915637c84c06171c90a3fe1a2f3626ef6f4739282b863d1703c557dd8eb95e953d44582f29e749bdbcb3ddc1b3fa3cc", 0xb8}, {&(0x7f0000000300)="68b585b3285ce91cd42c890d2ba640e7fb52ef032db4e6d8d23ebf6cee81c64b5cc2610cff6a9b20e263f13ffa2552006714953590abde69a70209c67bbd79c4dfed0e737c3887694c0d41369c46f3", 0x4f}, {&(0x7f00000003c0)="5a499bf3c50484", 0x7}], 0x5) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = syz_open_procfs(r0, &(0x7f0000000500)='net/softnet_stat\x00') perf_event_open(&(0x7f0000000480)={0x3, 0x70, 0x75, 0x1f, 0x12, 0xea, 0x0, 0x4, 0x613a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext, 0x8000, 0xffffffff, 0x7, 0xa, 0x9, 0xb9, 0x9}, r0, 0x0, r4, 0x8) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fork() 11:07:48 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:48 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x900}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:48 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2a640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x3000000, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 926.227919][T27018] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:49 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 926.539858][T27070] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 926.559222][T27022] debugfs: Directory '27022-6' with parent 'kvm' already present! 11:07:49 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x11}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:49 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2b640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:49 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:49 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x1, 0xa1, 0xc0, 0x0, 0x996, 0x401, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x99, 0x1, @perf_config_ext={0x1, 0x6}, 0x80, 0xfffffffffffffe00, 0x3, 0x6, 0x2, 0xfffffffc, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x2) r1 = getpid() r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x4, 0x6, 0x2, 0x0, 0x749, 0x400, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9f5, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x2, 0x1, 0x1f, 0x6, 0x9ca2, 0x3, 0x4}, r2, 0x3, r0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) dup(0xffffffffffffffff) sched_setscheduler(r1, 0xbbae85e364828e3, &(0x7f0000000380)=0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fork() [ 926.967933][T27088] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:49 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x18}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:49 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 927.242669][T27130] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:50 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:50 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x60}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:50 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x4000000, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2c640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:50 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xcab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:50 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:50 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x400}, 0x0, 0x0, r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() 11:07:50 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 927.909533][T27148] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:50 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x10e}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:50 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:50 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 928.161770][T27149] debugfs: Directory '27149-4' with parent 'kvm' already present! 11:07:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2d640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:51 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:51 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 928.464365][T27210] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 928.714107][T27262] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x5000000, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:51 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:51 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x500}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:51 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1100}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2e640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getaddr={0x2c, 0x16, 0x100, 0x70bd28, 0x25dfdbfe, {0x2, 0x8, 0xc0, 0xff}, [@IFA_CACHEINFO={0x14, 0x6, {0xfffffffb, 0x0, 0x1, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000040) [ 929.364470][T27362] validate_nla: 1 callbacks suppressed [ 929.364493][T27362] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:52 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x600}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:52 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1800}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2f640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:52 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x700}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:52 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 929.695762][T27374] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:52 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 929.834522][T27422] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 929.939443][T27318] debugfs: Directory '27318-5' with parent 'kvm' already present! 11:07:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x6000000, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x30640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:52 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x900}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:52 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5865}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) [ 930.089514][T27435] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:53 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fork() 11:07:53 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:53 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xa00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x31640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:53 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x7000000, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 931.224221][T27502] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:54 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6558}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:54 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 931.350082][ T3240] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.356558][ T3240] ieee802154 phy1 wpan1: encryption failed: -22 11:07:54 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 931.595161][T27548] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:54 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8100}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:54 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x32640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 931.997909][T27566] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 932.153506][T27611] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 932.402639][T27507] debugfs: Directory '27507-4' with parent 'kvm' already present! 11:07:55 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6d8, 0xfffffffc, 0xc, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x40880, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0001015}) fork() 11:07:55 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:55 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xab0c}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:55 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x33640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x8000000, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 932.569622][T27667] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:55 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:55 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe01}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:55 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 932.858441][T27713] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:55 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x34640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:55 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:57 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:07:57 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:57 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1100}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) 11:07:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x35640200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 11:07:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x9000000, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:07:57 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat2(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x152, 0x4}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fork() [ 934.594277][T27825] validate_nla: 2 callbacks suppressed [ 934.594298][T27825] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 11:07:57 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:07:57 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1800}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x80) [ 934.804009][T27829] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 934.812057][T27829] #PF: supervisor instruction fetch in kernel mode [ 934.818581][T27829] #PF: error_code(0x0010) - not-present page [ 934.824573][T27829] PGD 81eef067 P4D 81eef067 PUD 81eed067 PMD 0 [ 934.830867][T27829] Oops: 0010 [#1] PREEMPT SMP KASAN [ 934.836097][T27829] CPU: 0 PID: 27829 Comm: syz-executor.0 Not tainted 5.12.0-rc4-syzkaller #0 [ 934.844886][T27829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 934.855027][T27829] RIP: 0010:0x0 [ 934.858564][T27829] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 934.866296][T27829] RSP: 0018:ffffc90021b074e8 EFLAGS: 00010246 [ 934.872403][T27829] RAX: dffffc0000000000 RBX: 1ffff92004360e9e RCX: ffffc90002181000 [ 934.880403][T27829] RDX: ffffc90021b07520 RSI: 0000000000000012 RDI: ffff88806e4c4000 [ 934.888397][T27829] RBP: ffff88806e4c4000 R08: 00000000fffffff1 R09: 0000000000000400 [ 934.896392][T27829] R10: ffffffff871e3dc4 R11: 0000000000000000 R12: ffffffff89ecddc0 [ 934.904394][T27829] R13: dffffc0000000000 R14: ffff888015b39400 R15: 00000000ffff0000 [ 934.912393][T27829] FS: 00007f6616f54700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 934.921797][T27829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 934.928856][T27829] CR2: ffffffffffffffd6 CR3: 00000000273c0000 CR4: 00000000001526f0 [ 934.938014][T27829] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 934.946187][T27829] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 934.957668][T27829] Call Trace: [ 934.960959][T27829] htb_select_queue+0x17f/0x2c0 [ 934.965856][T27829] ? qdisc_peek_dequeued+0x250/0x250 [ 934.971179][T27829] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 934.977452][T27829] ? htb_search+0x140/0x190 [ 934.982100][T27829] ? qdisc_peek_dequeued+0x250/0x250 [ 934.987419][T27829] tc_modify_qdisc+0x44a/0x1a50 [ 934.992297][T27829] ? rtnetlink_rcv_msg+0x3f9/0xad0 [ 934.997434][T27829] ? qdisc_create+0x12f0/0x12f0 [ 935.002344][T27829] ? qdisc_create+0x12f0/0x12f0 [ 935.007231][T27829] rtnetlink_rcv_msg+0x44e/0xad0 [ 935.012191][T27829] ? rtnetlink_put_metrics+0x510/0x510 [ 935.017689][T27829] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 935.022999][T27829] netlink_rcv_skb+0x153/0x420 [ 935.027788][T27829] ? rtnetlink_put_metrics+0x510/0x510 [ 935.033277][T27829] ? netlink_ack+0xaa0/0xaa0 [ 935.037900][T27829] ? netlink_deliver_tap+0x227/0xb70 [ 935.043214][T27829] netlink_unicast+0x533/0x7d0 [ 935.048020][T27829] ? netlink_attachskb+0x870/0x870 [ 935.053181][T27829] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 935.059450][T27829] ? __phys_addr_symbol+0x2c/0x70 [ 935.064613][T27829] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 935.070365][T27829] ? __check_object_size+0x171/0x3f0 [ 935.075769][T27829] netlink_sendmsg+0x856/0xd90 [ 935.080562][T27829] ? netlink_unicast+0x7d0/0x7d0 [ 935.085618][T27829] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 935.091901][T27829] ? netlink_unicast+0x7d0/0x7d0 [ 935.097244][T27829] sock_sendmsg+0xcf/0x120 [ 935.101776][T27829] ____sys_sendmsg+0x6e8/0x810 [ 935.107268][T27829] ? kernel_sendmsg+0x50/0x50 [ 935.111963][T27829] ? do_recvmmsg+0x6d0/0x6d0 [ 935.116675][T27829] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 935.122780][T27829] ___sys_sendmsg+0xf3/0x170 [ 935.127394][T27829] ? sendmsg_copy_msghdr+0x160/0x160 [ 935.132803][T27829] ? __fget_files+0x266/0x3d0 [ 935.137624][T27829] ? lock_downgrade+0x6e0/0x6e0 [ 935.142518][T27829] ? __fget_files+0x288/0x3d0 [ 935.147231][T27829] ? __fget_light+0xea/0x280 [ 935.151846][T27829] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 935.158322][T27829] __sys_sendmsg+0xe5/0x1b0 [ 935.162858][T27829] ? __sys_sendmsg_sock+0x30/0x30 [ 935.167922][T27829] ? syscall_enter_from_user_mode+0x27/0x70 [ 935.173858][T27829] do_syscall_64+0x2d/0x70 [ 935.178300][T27829] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 935.184400][T27829] RIP: 0033:0x466459 [ 935.188307][T27829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 935.207934][T27829] RSP: 002b:00007f6616f54188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 935.216379][T27829] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 935.224392][T27829] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 935.232472][T27829] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 935.240825][T27829] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 11:07:57 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 935.248824][T27829] R13: 0000000000a9fb1f R14: 00007f6616f54300 R15: 0000000000022000 [ 935.256831][T27829] Modules linked in: [ 935.260750][T27829] CR2: 0000000000000000 [ 935.265546][T27829] ---[ end trace 53dc862a5b6b5f0a ]--- [ 935.271093][T27829] RIP: 0010:0x0 [ 935.274603][T27829] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 935.282326][T27829] RSP: 0018:ffffc90021b074e8 EFLAGS: 00010246 [ 935.288414][T27829] RAX: dffffc0000000000 RBX: 1ffff92004360e9e RCX: ffffc90002181000 [ 935.296925][T27829] RDX: ffffc90021b07520 RSI: 0000000000000012 RDI: ffff88806e4c4000 [ 935.304921][T27829] RBP: ffff88806e4c4000 R08: 00000000fffffff1 R09: 0000000000000400 [ 935.312922][T27829] R10: ffffffff871e3dc4 R11: 0000000000000000 R12: ffffffff89ecddc0 [ 935.321018][T27829] R13: dffffc0000000000 R14: ffff888015b39400 R15: 00000000ffff0000 [ 935.329045][T27829] FS: 00007f6616f54700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 935.338046][T27829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.344678][T27829] CR2: ffffffffffffffd6 CR3: 00000000273c0000 CR4: 00000000001526f0 [ 935.353034][T27829] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 935.361026][T27829] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 935.369456][T27829] Kernel panic - not syncing: Fatal exception [ 935.376178][T27829] Kernel Offset: disabled [ 935.380642][T27829] Rebooting in 86400 seconds..