d17d53fbc46614a4c0884fdd44f8376b89609ee0f5bbf9b9d2d1a40807ecaeaa388c50f811376b57920a29a9f73389855b98c9d76c38bb2c8b0d3339154f4368b517aef6643a33c1d6eb412fa8d55fa8ba0b388b432b355e94225d5", 0xe0}, {&(0x7f0000003a00)="0b263ea52c04a743ca2e102cb5bb9d38300ae78065665b5295f52a314b315450f1e2271cce1bce34769f22ef24a3538852a07006596801764ef4c5adc8740d9f711c8b2bed55d75b6a2fbe78dfb08c196c3f75342272dbc8c01d417ab174d6399b7668d2dca47cdf8ef16063ec100cd8f4b4c5bceef5396f136e6813f6ea53d9c2ef4ce117c0d11c1f4591a3523523cc44bab3a2b6f0a42b9db5209bf8899b2731c2627ccf11fae37d6789fdb33ce3925549a974a3ce3a8d9161a6def0bbd5d1dcd9edc82a80de4069f14bee84a319962845f0a34f8f53c9ad571367a0da83294d6e7fd3464b6d2f6980f0350d5c18e1c0db9ba4df8ccfc56752714a718ddce74137c312d2c0b5d126cbdc615cb0f602d262711a9f38cc3ccad94b36aa27d8d8c5b83f3c3ce7211fd87f348aedc78c1df11ea394fb8cb413082386eb5ae10b5000137cb93a31e61580db0743637117ce1f9838f59c4e1ab03580c2699ca0115ce73e030a139ee9684b1dc755236aaae17f3c9facbee6906e2821fd41a6871954fe7da35eb8ffe1097fadfac583ca9696e95dfb3f794ee2929182c5177e2d22100f66c3a9581b6bd4243b1d2b5cbe40a181188a85cab97693505acf61d772a133458df8fbae87cc0cbc8923820872d7cc34d49320d756aaf2a1abadfe87a480f0f0a2d1a3f64feefc9d35f8c10ff5a89cf23007571b5a3a361a1505a85a0203b01ed8b0db6026ee1a116fd76e1ec011529fd741b1222d7f516e53e61de1da7ae0a65a27809bb3ae82b5eb7ce5d51d60712d7f44ddb2ff72d3e88853671c41bcc3a9429993fa3f30f13176d898e5e83705dca0c6046e6ce53cfec201dce1dbd623f55e3d64fa4492e5de46ad77243ad94267cebe68716ef07e5d754e128678bb9bc4a7586ec88d1b070d4a1122e5f9106cf56f83fcc6ba762ffd445bc239916a08b27589e99551aa4dc14ffba5c70a478f50849ae61b34e32cf266b6cfa032f8dc17eaea662947980584b1bdbc72e34b96e70b4ae6f0e8f6e07a259c1a6d5c4c99bb81b5aae1a872ca38334fff33ab70c5aba44587939b7a8cb1bed1f14aaa1dda5f54acd768153eb89ea413b8e53d9458f9c84d54a99bb37f7bb74dc72af392ee2b8ca06b32016ee942ba426bc1fa70a22696fd7710ee7c5cd9c9521cc05947addfac528b281f2edc54d8be60c434237d9e45e77920ca049743a3c14926c1cf783d9fb399c5233e0b08db245d8dd7dea8856678dd9dc6805dbf2a7d579ffd129ffba60afb4f928dc8fe92ff3cda1396acba673b54fa7da1232a94366b04f04a117f7129be2eadd0f70b0588be34515f89a1eb6a2538b001e0ce84b89846d8672ecd538fad84059c2e49b9bbda394a137818b797a94cbab5c12782f264438b384a138b6a02e6d1f1768d75eb20e504f236f6b7c12ff9c33b044dfd4ace2c56bc7f2c6e4d9ea2ff6f9ec8cfea2db08b4b9ff2ead97790dea98e126d05ea2b8671dae6f2c4fcdb75a770099f3a553a01c0c7c2bfad77c2dcf30f95f0b8c90f42eb6145f739f4c6ffea1a92d28a621268f639dee7036ee5635649f259811863c7e542554f20489f0ee516061a12e00a37146e507e50d6c64575ad5feff9053807b88402ace714904c4836493b0f5275006e3f1e3f84bcfac265765051f91b7d96d740ef54fb36942a6ed29a022c1b543bf626b14676972a13eacfba0ce269990a7454e8df506569ca96e0267bfcddd21f1bcefc8cbc001c7484faa498cc4253f4e6d71f71255f3668c1c20c38a5d75e53f82dba978730bd5c01efbbe83724b14f0ca5ab7fa15680a411fc5348a212d873e50c04c65469d2852c61047e9e8a60a8676389dd5003be29e42e3fd02977ce761d58e630d9b4e4d2562295a5baa7b2869b7c48786a8e2035a72b42e5efec757f0896058b7ecd8f408b9cd863c4d40c2f42568e8bbe6b84231bf4ed05116656f720de0ba2a3cae4538e61cd54e23cd49d2640fbf1ea83d7352fb768a15abbffa8aade1a0023f7020ca822ff9c57cfacbcad4eec71cbacdc299eb94e0fb2be50a1137685d7cd1b0099c1b1755c4c53dd23b433c665df3bbb691ff2abde6a6f4077b2fabb60bced2bea28550aa3d29bdbe4bf167506870c93aa3c828ca4d4a656e9a1a13f5bc61fddd78ceb5642a4a9c8a864779fe355b6de8d540cf443a76b7610d9ae9016a5d9078284df810ce1e8ea40a1b3609474d86e6fb4761ac058d8d57321801a20869dbd73ea0bb032346d0306c131e45033bf86d548e39780c59faba4bc913309a764525b39f4288db31c4231ff3405532920cdfedf536cc390746058cf354067024f4a2db22e62f2f03cedc7d206d1cf9f7f3f8bc3970007aa1c3d9464e8ffa969ac5fca44c4a7206b69feea0af0d554f4eaf7ed273af489fe6938a2f68c35efdfb00f33729013d028158535e469c5a6206c2ae5afc8cc873d568bf29205b2173ca68130167ee1a5e3a276f9fbb5a7a3744c39742171901af6479b4924dd56f9c282cef8208dd486bf523c2d2990f53b915b4a4baa26ee835ef8e4becf16bd157b80cac85c0e19d6ac4076eb65c18de07b0fa49d62ab5b7deab308060e9d3f1d95904df269590fe702abcdbc4b40f24080bd057e36f744550a92c1fb337bc96b81f01c87c403cccfa576efb8496711d560280863588d3dcb9f8c8f283e04fb5abcfca6f95fe4d20a4df01dc8bc5812906ac0792f5bf1fe8c6abeb30b20b837aa84835296ae593cbbaf5ca2d810ad606a3889e207f687a9970de0e90681107b5421832a828aff9db85e0b997bf88417f35b63d42b285f9624377e0da514ef0c697004bfb8467d1caec411f3b1328df69d9a14dbb0e87e203b60e24b21d716b6ca9a7759e196200de8e9a2044997104e21a69fab6db26f9c874410f450a3af68c35691f40bfd20833ad73c1b99f2957c9c5136e9e9ba08ec8345edb829e5212249cda7f9ccf26c4f2d19c598c81c84a4c729283a8975f6fde38d59956e5e8b9cb8605d95916a8c39e8ffd23b2673d35f1e225f7e7094b946733b1c87c866da7eb6ae68ab8d43d9991eb48acc31db9e986f322b6b5b707aa42ae323643e48d779992e2734633b0c2333f96ec4743c04086a6a0a599a7946da025b5a005e6a44b708ce8ae41bfb1e145db34f11e93a8663a574ef820ad6f6c22e2dbe6469b038eb1a43a69086598a5286602446e0ace6beabe8b090834f4785c7ca01a6589a31375f4af9df2074909f8ca55fcd5511ad6aaab59264801c8baa0b522245fad5cdff2ed2b5d21efdc63fc49dca46d8b9695688308077a3d4c9a8c090632eae9ea5acb943d36700689cadcf25bce6b4de8cc49696071b1a3d83874575b40fbca6727d6749f8215b16497dbd36c986beff53c62d13aaa940b8581098e1e4910a3d31e9da9fec28db7ead8ff3b4b107ed8af3bbfac652050d389e5684d2bd90dbcf1abc2d007f1dd5b47f61a7d6b0e0b07f3a17fa5733a66a5b7f622dc6ba6af8ef05708a5b87921d9e461680794a134ac67c191731d6ee3da838eab4e9437750ed35e020a11be9e2eea901101f4a8620c1c3c956dabcd5ec785717bd4414306698e390422e3a463edc8c0334236ddab705fb9b6fe92c00d5a81e27ac6c8e654e668d018c2ee014ee80b9440917ec9d3e7eedc05b91a7e1fb7e93ea7643aa705bc7c5d2c78cf039be21f1786cd28414613b944246cd1e834f7f88d80db270debdca95575f0df0e8b13b4a6b71e879fea7cdf5942406f565d4cab3d1c1cd2b1a2a6e68171dbe08b6a6603c92e7d5fd7d849fb9cd3b1189d5e3e36b30d5e06cdbec0fac3d89a1bf1ef87a87cc6f496a85ac5f73e2e5563b0993ccb262ef006b1f3e3b1bf37757ecc510f79468610001e0ddcb4f2492e9d9f826d7e5b9519c011379254532c87fdc63321642579e3eb67453ee85a5134b0d76595c93d4e4348389cff73b5df77e0f2010f99b8b102b08886c6ba14efb4d87d5c085b78f5e8f24cb45fbbc036aface48fcf4bd7cdafc7e77a0d5c932757cb0eaebe443e871c77b554e776a070401222d3a86d01a4b9b898b1c418670ba771c738806a6b8426e78ddaf9372f48c40ac3ff7df1e157d6c80c6ef6b353f0cf17271053de556be932e73d474cd2366dad913639a09776e8c1303d393c4f0479e36ac8a7009fc234b04ab1b294b73100e78893e7f903a5692c620b979d342d490bcda5c7c01cd412459272b1fddda2bde77961fdc496f99b9872a1f9202490721012d7e68082d4945910b1d0eb429c37e12b577d467d86d03a3ee9d6de03ff91b85ea9cd06dc7295cce91436eaab3a69368e22bd8be3aaa951533090a0e35b42b247a7b8f5bc951ca96017871db2ba982dfa573069b3708a9a26f92c115d43540e80bf134de71651d74ce65d6b5e9d3916593d994e55407bc4e9c171140c1e2c0d60fa6929d8d5e5fcbf02400d2c99ff5be5b501509dadbaf492fe3aa2fe2ddb94181e71607cb810cd2ce2c7c6cc16eec0660f1bf81ef6daa316cf2c13528b50dbbd491f7847fbb19fc6ecb99658b7d37d7f4cd7be875cea86065e6b06c92402f91c709c7589eedc77084eb4ed03350c4796e15a7e872b6ba2300f520b301e120444b61d2ad0b3cc4d3b19987a91f070fd7a78dbafaf00246c315abd7dcef3a4c54f599e2043cb9dade90fe49aa6ae0b83a7e65239cdd1194e17bf1b7509009e19cfbaedd3bad3b16b5536f25fd868da1f0357110f8bdc953ab74ccc7966e15837a067c59c0edd30abd1c94d7f4de5412a41b22338b7daf1b92c7bdeb7cc834e007beef6c68ca888a451e93526f383ff1e1e608421dadb967e8375bc54ecd1626ca7fe107a4676a007b8e2b9fae99dcac013d75a492e2c7008472a3f6aee23d1fd7f14535a7f2b6e9ff80e35dc83929d73bf55a6211d01a44a419b0510920039aaa60fa73332be447850ff859a4f9d2ed6e89a728dcd50b6d8e60ef208edd24c3367eabfbfda606e42ef775c2441adbba33a7e56a4a1c9750c8a6455e78f0be3ebc621896b71e3b06f1de3ff74aedfdb2d693752a1d5bcf7ffb9809d18c7ffa9d9396fa66f1dd026abc0d9bce917b6f8178bcd8f84cd567c241d5e6716e05a78ece6e9d793d41035b5fc98381f059ec2839f2dae4322ef177f85a897517edf9dafc41eb90fbb5d97eadd635689e225b9dc33397aea613609ebe4f28a2882363646b5c76640b6f784f6860a936f1f850f6cc3e867c3ead110c6f0e4f4074e3dac5b7f2725415f8ff3ccfe94959e08273a3b2b0862b89aeae05851792241eaafa00e7e187f7f06f30e635c819821ba915c2f6fb76034e0fdb2d7668b9273b82b2136f559faff35ee2de3cbbdc5be2fdc92a23273d2cea6b50375120b8aaeaf928968ec59e6aea053594bf933fabe9f628963289dd010c86c69b6bd88fab898b1d8e7adf5acdc80a223f03e6e7d905dd43740ca83de2d9a798256bb12e4ed0739cb3ccd98f860489993a74da5d909176157f365c2998694088c6700aa15f712ba6411dd2d4df21eb08d007f7a434e0f8a533586165886d0c49bbf99e8d85f9a803f7997210d25ce12a15f22d74262815c55499dd6d6e21d5c324c434273fa5077ccbfc4997476a12b7ce2804e6431ec8f57fe0d926fed1c51492038dd4c52115637b61a21ceff61239f4241969015c5e9cdce6ef23a5a4a9d7181d908e684f31cfe041d7021b6bb90f57bba10867c1182eb350e5fa3291bb5e6651e0b18b3e1f1ca11c695de41fa15550b8357d81e414d0648be927b03a054ad9ad6fe449cb", 0x1000}, {&(0x7f0000004a00)="f62dfd112cf0cd4baa643234a45b798b18220836a3d477b09ff30776b629a079f2b8a43b88e08cc61de0737269ac2dcf5bb244d9a29cd962e0b938d5814fb4d1e14ef2e0b6a5477aa5af02ec4d6edd7dd493fcf13af06a036811c831b3da9638ca52c85666707705c9946d1f0068297cb4726a5da7c3a36bead89fe22bd0a493c33756abb0253022ed47b61899922fb5bdd72dca755b89b029b27afd3018a2f1c0cc6921b3ab43c16838f573e77db226aef951c30256b0f8434cbbf224c0c207395d532f141df93f78c7c77f61a0289c1ec7", 0xd2}, {&(0x7f0000004b00)="7dc67f650ae17d4a9bdde6a6c3390f2b91f72e509a39910db1c2cf52a395e693cea7da684a599b2cde14b74513e117206aeb80a2c7f200f2e1af86ce6c304c21081d43b4638b6db6566fe8e1b8d1fb9485b2b36b7c4fe9738054c4a130e48fa7d918dde6d68a5e6b9142bc95fa1c2edfd83099f5206422cca9e5e65bbf50ff667c40b252355b8b776afd585d2f60c5fb5d306eea50eacd0ff74fa2e10735a2fdff96e2b6f8e33e929c1cf55543f96fe641fd1746486831584150daefeccfc0eb39eca12d8ea72743", 0xc8}, {&(0x7f0000004c00)="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", 0x1000}, {&(0x7f0000005c00)="3a79cb36769896452a174b91419185550ca6fd45274c04552026ad8b092d2cfe295485047dabbab7f2e6e18365f5f260f53e5b2b", 0x34}], 0x7, &(0x7f0000005cc0)=[{0x110, 0x107, 0x400, "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"}], 0x110}, 0x7}, {{0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000005e00)="f3e9c5c45083868be6134425b7a56e845c7ece9b8b24c01a9a9be26db6e39730e8ea48dda67f6071b419c7b5a808cc88297ca621bd5a186b6448a5ddd54d4df729685c516b04c089bb4d9731b9d79b0e72ccd65cf43888340cf36732e3dd742d304f35a11f8c2f6f5701f4b7dd0acbf9c17b6d8c5984311fac45e9f66f421cc060b4e331e8fa0501423c2fd0afebc588bc11327a75507b6551a4a891da275e2e6c5092467765aeb1297e384c0807aa48ba6ba7ab5d80730055c481fb3090680c8d6cb00798ed0f5bac8f4226c2fc6a51fc4e4af09e107dd8461ff9b3f3bbc996657358301f08f7", 0xe7}, {&(0x7f0000005f00)="2234b0f8a547470c1010039bb08f088b9008c6", 0x13}, {&(0x7f0000005f40)="20710f8f86f996e67eaf48746dc989f14e0abfb9a184bdff561d89dcbbfccf86cfedbf5f21e0306717dfc22f720c04bdde73f4760aa4a9b4f7b896737060fab36aade19c131e5057c79014702e739777c6eefa", 0x53}], 0x3, &(0x7f0000006000)=[{0x40, 0x11, 0x4, "3c79a062759e1c433936c9d573b8acb2cb4aa3bf4e24072182602a03d932ff1bd0349369d45a87da80c1b80b"}], 0x40}, 0x4}, {{0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000006040)="cc6a4c255ff1d264c71d4a70fe38f8382fd11b38263e82e944fe7406f7d109f33cc2818d6629555fdf2b041439fba6e343fc5b6395f511244b5f8e", 0x3b}, {&(0x7f0000006080)="7f26e91e09dd2206ccc1fc9fe986fb56c1e5277d1884ff45a1be5e4992fc92dc", 0x20}, {&(0x7f00000060c0)="5c17c1bf195301adf7a9d977fdd3ef9175a30218136a2fc34705614451b3b07bf9a985bf2448505de87b96d5c642b58fb52785d303b33f9e6c449a514ede4b743734234c33af", 0x46}, {&(0x7f0000006140)="6c3e58cb6a123a7ce3b954edb864ed58b579da6ff047d226f339aa02f806b75a8a618bb34b6ce63b28d1c38441d6b81a88bb473ced995e36ded5", 0x3a}, {&(0x7f0000006180)="564fdc9ab6938065ce8479d59b28dface1ff88444cdbb5272f73f33fc96796e0cb0f5b2ac021e8a53bfc55269abc90aba9ffd68f16465a2d30c163de0ea058225f5d722ec43c99f09623ac1983811e065f2ad8ec8081c6552b1463a8a04c8b6553400bc043800209792beb61450df2b5b887855cfbb975cc12608ccfbc2c901fc81d8db6e28fd8545ac7f8", 0x8b}, {&(0x7f0000006240)="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", 0xfa}, {&(0x7f0000006340)="c5f5fbaf7964c69294aeb398cc911c4885ecbf506a0186b10beb1027079e50bef5605c9537905a276ca5919272d3bfc9b4c83e95a7e3e5a434e020a2aa8bd14becfb8c204555b79b316394e79ab4435a9f7a619a82929f8acef97622575f7b66cd9d82b48c78728da3bd783b1a72e3873f63c6ca6fcdaa0b3f7e5a63", 0x7c}], 0x7, &(0x7f0000006440)=[{0x50, 0x0, 0x7ff, "c459f2d205fee99af1488358d2c64b12d9151bc5865bf2c57bea003e64922ccc611fbf9b6c720365d3d5de7badece7adcc07762f90a48d980a66"}], 0x50}, 0xfffffffffffffff8}, {{&(0x7f00000064c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80, &(0x7f0000006940)=[{&(0x7f0000006540)}, {&(0x7f0000006580)="e835118694d0465e8cf78c955d247f5af14022f13a2b0b11cc51e288575365e83cb561e16f60c38a654e1d0fd7d6f456d147a42ef03d36cb070bc6af94d973318db166521c01f8", 0x47}, {&(0x7f0000006600)="c2e9789b1a6aeda79b0b9dbe210fc1baf44d2f68419fee56edb50b18a008198bace863e36e7ec03ce94262acc9f19a8583f52f88509e4f1cd176baf147ce51b0c7ae244846ffb50962dcda4989bf0749ad0f2a7c8fd52044bfb62e4d8199eaec407ce8137ba2ccbc323f35b0c0472f1bd5f0644e543f9a7ba71bde900cc93b213016887fddb8b53657099d541015858543976e24568108f221d7a01523eae8384ba36bd145d4723ecb341f1dcf1068fb8807c56d66bb895addf3d07ae21a74d073401a0280b1755ffe57065f8b163c64bbdff7e3469815fb89776ef5019136bb2b235e93a39561f8aeab566a", 0xec}, {&(0x7f0000006700)="795fec210093c6da5c049ce6964a7a52625bcc2b8fe7f41be3d34358b126590a0c3a8b3d116c71e8a3e571f015cfe246a1117223005e9bd39f04e99a87dd9604c80510aff5781c3259097a5fab32b6b1eaf0847be0933caf76236fc678e7a72be7e757084bb5ec90477b369ca3fe", 0x6e}, {&(0x7f0000006780)="f091f4ceb170f5c3ee4a877a397c250b3196348445de36b457e68290503ba9c99e678fee1d4db6bcd30796455ea94cefaea98816229a31f050caec249374db50f510427a64d5dc6cee065cf2818834f717294d56ab8099cc319e3a1e066902b17fe0d98bb879949e76a27a2b6ca7965fd0b2a4ac2f4d13941e99c37963f1e91243378de3cbf3651c71b9081382999c9c80be7fbc8b3a02c84d062ba83a", 0x9d}, {&(0x7f0000006840)="e3bf97cedfe418c3b5460d72d97f9e86a0ab5aebd6cf2a2c6968149e10b35196a197b0bd6b5db20a951f9dfc279c33282968c588e99a513480734a5d1242e421d7dce7a44c4963d687f9b8957739c1779a855eef1220ed16c94071bed72994edd05ff223b6a2932c5319f5bdb3c00bf2ea1ff9356e9fc6e379f96328825307d2f39479a203051b1ff6b9934c82eac02cbfcdf0df8d6c6a87328df9dd14b059139ed2f1cf15d8a394cd2a1375e39bbd895f1f8cd14f85199b231d53de8b6c747474003dc9f9783ccc0b664efb663585d8a1e42e2dcb53f43cb9553386f5a7", 0xde}], 0x6, &(0x7f00000069c0)=[{0xa0, 0x100, 0x34, "e9772ca9b25ce465d3e686f411cf2bfe6bd1e740ec90c491fe78cefd6d23fab9a3a9d3e5a82dfd89683ff5b785c0f08d4d5012c6baaeda9d4b2f288470c7a0b54c180c76997bf65581593b8203159e8d5d575f4c88fc691d4b92ffdfd6dd44c881bc440df9dd7b6a26a568726d900210c99c1d43c51445e32d04c05921f19818e136cf790e715f949e45789d442f"}, {0x58, 0x0, 0x6a, "3ecbcc138140be861c0de2a38af2be355f249a5664c50233d4b1b13aae841b3de38ef7f906e0853f97416aa71ea6bba6201fca69ce12c6e238ae1a54ee3d424548"}, {0x40, 0x10f, 0x3d, "2d93b38ef79f360fff244030d34b7b810fc743509a922f41977771fe70541c96d5d3358ae0814969396c3dec2cc0ba"}], 0x138}, 0xc5f}], 0x7, 0x80) 16:11:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x04', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 828.637526] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 828.686229] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:11:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2000000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:11:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r3 = dup2(r2, r0) accept$alg(r3, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) fstat(r1, &(0x7f00000000c0)) 16:11:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 828.943107] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:11:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:11:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x693000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) 16:11:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xff', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:11:56 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(r1) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x14d9860aa6fdb104) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xd70d}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000001c0)={r4, 0x1, 'b'}, &(0x7f0000000200)=0x9) [ 829.319498] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:11:57 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x900000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:11:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x10000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:11:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r3 = dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x8006, 0x3, 0xfffffffffffffff7, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0xffffffffffff7fff, 0x4, 0x100000000, 0x7, r4}, 0x10) 16:11:57 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xadb7, 0x101000) mkdirat(r1, &(0x7f0000000140)='./file0\x00', 0x100) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r4 = dup2(r3, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) open_by_handle_at(r4, &(0x7f0000000180)={0xc, 0x2, "a5c7bc60"}, 0x18000) 16:11:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 829.777988] validate_nla: 2 callbacks suppressed [ 829.777999] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:11:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r2 = dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) [ 829.863156] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:11:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x7f', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:11:57 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000140)={0x2, 0xb0, 0x4fac}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:11:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 830.178386] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:11:57 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000140)) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) ioctl$LOOP_CLR_FD(r3, 0x4c01) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000400)=[{0x10, 0x0, [0x7f, 0x100, 0x8, 0xc1, 0x7ff, 0x1f, 0xffffffff, 0xff, 0x0, 0x24000000, 0x3f, 0xff, 0x8, 0x1000, 0x0, 0x8]}, {0x34, 0x0, [0x1, 0x9, 0x8, 0x4da07153, 0x2, 0x3f, 0x4, 0x8, 0x8, 0x9, 0x2, 0x7, 0x10001, 0x9, 0x7, 0x3]}, {0x20, 0x0, [0x20, 0x7fffffff, 0x1000, 0x9, 0xdb6d, 0x3ff, 0x6, 0x0, 0x2, 0x7, 0x2, 0x72, 0xffffffff, 0xfffffffffffffbff, 0x401, 0x3]}, {0x1a, 0x0, [0x6, 0xfffffffffffffffa, 0x8, 0x0, 0x7, 0xffffffff00000001, 0x100000000, 0x3, 0xffff, 0x3ff, 0x4, 0x800, 0x8000, 0x6, 0x8, 0x7]}, {0x3, 0x0, [0x8, 0x2, 0x0, 0x8001, 0x1322, 0x86, 0x7, 0x40, 0x6, 0x8, 0x9, 0x2, 0x0, 0x3, 0x2, 0x80000001]}, {0x21, 0x0, [0x9, 0x7, 0x0, 0x8, 0x1f, 0x800, 0x1, 0x80000000, 0x8001, 0xff, 0x10001, 0x7ff, 0x9, 0x200, 0xfffffffffffff60f, 0x81]}, {0x0, 0x0, [0xfffffffffffffffb, 0x7, 0xe3dd, 0x7ff, 0x0, 0x3d, 0x10001, 0x3c33, 0x803, 0x3, 0x5, 0x0, 0x9, 0x5, 0x7b, 0x6]}, {0xb, 0x0, [0x8000, 0x1000, 0xc1ee3a3, 0xfff, 0x4, 0x2, 0x2, 0x100000001, 0x71, 0x6, 0x6, 0x6, 0xfffffffeffffffff, 0xffff, 0x9]}], r4, 0x1, 0x1, 0x240}}, 0x20) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:11:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x8c, 0x0, 0x0) r2 = dup(r1) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000040)={0x4, 0x20, "02228b9dcc3920f24cb1571184f1cf0dc76af4602bd9a470", {0x3, 0x6}, 0x9}) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) ftruncate(r0, 0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x800, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1f, 0x5, 0x0, 0x4}}}, ["", ""]}, 0x30}}, 0x80) [ 830.240996] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:11:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x40001, 0x0) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x3, 0xcde, 0x1000, 0x800, 0x0, 0x4d651a6e, 0x2276dff5afb629e9, 0x9, 0x1, 0x6, 0x6, 0xc646, 0x9, 0x9, 0x157, 0x20, 0x7, 0x1, 0x401, 0x1a, 0x1, 0x800, 0x8, 0x8001, 0x623b, 0x20, 0x6, 0x0, 0x5, 0x4, 0xffff, 0x3f, 0xfffffffffffffffc, 0x0, 0x7, 0x2, 0x0, 0x9, 0x4, @perf_config_ext={0x100000001, 0x100000000}, 0x10400, 0x3, 0x175, 0x5, 0x1ffc00000, 0x9, 0x8}, r2, 0xa, r3, 0x5cce2e89139ea0a4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) 16:11:58 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x4000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:11:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:11:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1000000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:11:58 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) dup2(r1, r0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x40) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) inotify_init() [ 830.841591] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 830.888988] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:11:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x20080, 0x0) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7, 0xa00) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x100, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x10001, 0x10002) bind$pptp(r2, 0x0, 0xe) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:11:58 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r2 = dup2(r1, r0) write$P9_RREADDIR(r2, &(0x7f00000000c0)={0x4f, 0x29, 0x1, {0x5, [{{0xa2, 0x0, 0x6}, 0xc6e2, 0x1, 0xd, './file0/file0'}, {{0x0, 0x0, 0x3}, 0x1, 0x3, 0x7, './file0'}]}}, 0x4f) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) 16:11:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3f000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:11:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 831.165976] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:11:58 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) getsockname(r3, &(0x7f0000000140)=@hci={0x1f, 0x0}, &(0x7f0000000000)=0x80) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000001c0)=r4) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 831.214113] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:11:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7400}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 831.506121] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:11:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:11:58 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x4, 0x20100) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000180)=0x80000001) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r4 = dup2(r1, r0) write$binfmt_misc(r2, 0x0, 0x0) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f00000000c0)) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f00000001c0)=ANY=[@ANYBLOB="253ffd1808000000060000000100000073a3c5a93d70918451453fa7a0de7e9a0f05"]) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) [ 831.586518] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:11:59 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x6400}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:11:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x400000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:11:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xff', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:11:59 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, {0x5, 0x1961, 0x9, 0xf052}}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x7}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x608, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}}, 0x800) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) [ 831.829075] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 831.856292] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:11:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000003c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x4040, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0xd, &(0x7f0000000080)='cmac(anubis)\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x6, 0x1, 0x8a48, 0x1, 0x0, 0x9, 0xc8, 0xb, 0x7fffffff, 0x9, 0x200, 0x8a60, 0x7, 0x101, 0xfffffffffffffff8, 0x80, 0x200, 0xfff, 0x80000001, 0x80000001, 0x401, 0xd0, 0x4, 0xff, 0x2, 0x0, 0x5, 0x7b4648ad, 0x1, 0x59ce, 0x7, 0xd, 0x3, 0x7, 0x9, 0x1000, 0x0, 0x7, 0x6, @perf_bp={&(0x7f0000000040), 0x4}, 0x2, 0x7fdf, 0x2, 0x0, 0x9, 0x1, 0x3}, r4, 0x5, r1, 0x3) userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:11:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4000000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:11:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:11:59 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r2 = dup2(r1, r0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000080), 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000040)={0x9, 0x2, 0x5}) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) 16:11:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000500)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20041}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x28, r3, 0x40e, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x1) write$input_event(r2, &(0x7f0000000140)={{0x77359400}, 0x13, 0x1, 0x9}, 0x18) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0)=0x5, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) inotify_init() r4 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) r5 = dup2(r4, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xfffffda8) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='mime_type{-&systemvmnet1{em0+\xa5\x00', 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) recvfrom$rose(r5, &(0x7f0000000400)=""/241, 0xf1, 0x2000, 0x0, 0x0) write$P9_RMKDIR(r4, &(0x7f0000000280)={0x14, 0x49, 0x2, {0x0, 0x1, 0x6}}, 0x14) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000300)=0x6) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 832.383035] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:11:59 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r4 = dup2(r2, r0) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f00000000c0)=""/142) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000700)=0x0) syz_mount_image$nfs4(&(0x7f0000000d80)='nfs4\x00', &(0x7f0000000dc0)='./file0\x00', 0x4c5f, 0x1, &(0x7f0000000e80)=[{&(0x7f0000000e00)="32c9af19ec152dbfb8735e586ce94a5aede16978b5dc49900996e4d567a2c7a7620a29fb89bc8fcd3fdcfeb409621ad6958b50f031fb6baeab8659c5ce7efc838edfbea7810fc44a3292134ef196d7907f2ea4965839aeefbebeb705956eccd96fc026587d011f", 0x67, 0x8}], 0x8, &(0x7f0000000ec0)='trusted\x00') getresuid(&(0x7f0000000780), &(0x7f00000007c0)=0x0, &(0x7f0000000800)) getresgid(&(0x7f0000000840), &(0x7f0000000880)=0x0, &(0x7f00000008c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000900)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0}, &(0x7f0000000980)=0xc) getgroups(0x2, &(0x7f00000009c0)=[0xee01, 0xffffffffffffffff]) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000a00)=0x0) r13 = geteuid() getgroups(0x6, &(0x7f0000000a40)=[0xee01, 0x0, 0x0, 0xee00, 0x0, 0x0]) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000a80)=0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000ac0)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000bc0)=0xe8) fstat(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)={0x350, 0x37, 0x800, 0x70bd29, 0x25dfdbfe, "", [@nested={0x340, 0x61, [@generic="9b44a7da5deaa3df6adb11b90c573730bdfe17f238b00c881773503110d5ddf62fe0bb0f0f832940c57a56cbf1bd473d2d56a292cbaf8c24afe7bd506e653d0d39bdeeedd2cbb50261cfd41fd629235ee65a6334fff94fe6122e29307bf63912892e162895d799b512d267847017567204b4ad6378aa6c75da9dea452094117d5b7c6bd543bd552e7d26b51fe1df38c01b75d2b0cbf2f976218d81feae5ec72d308737715a1038", @generic="d396fe65cfa42c80d8cfc1226abfd2313518022a5ee64288b8e03a39a755a9e26688b5153f69cb044cdfdb17cde161f53aa0ae6c8f274193db0b42f2d6746ba6913bf14fee8e5006e49596d5418a9d5152f98227a84c3a798aece559ab7a7e21d805b6ec40911f78c2df45a6c982d1f46b903acbe05381f6bc348473e53942ba355a30bfddbb03759cb3e51f207297f6edd3d7b86ca5b3bf9282e4bc231ea93b5b601618a3ad9fbd0f332d796b9480fcdfda6d1529c316e073dc62b43c9f8e0da28c962437bb9594afc9a5aeb807dbc16eb904702553c0d0", @generic="6f58319ccc9a229ac14d10501cf1d71b528f2cc72ed7f053e623140038eb75b2b40397be5ad0bb5f383acf810e524da10c1e5bebba4f2e54ebd6af01c016099586d396fac67c3ba64cb67b09fcd478880374201986b4199c583fd258878f519a1f93f31f7ac4877e07d304e15e86f8e392dafc8eb383435211016ebdd2057b3308a9fdf8498c89668021c557e865412fde00a909af56541b472b505bfc599a69a9f957e26894c42d094cf83a51c5bea27a5104f2a2b80a8deecf3e5cbfc65486b9", @typed={0x8, 0x48, @ipv4=@broadcast}, @generic="da70a015ec2fa6d5a0bac03ef246986c1ed159d66f92b5ec31a546e6c12ed2ac8d6f3c5312df3fb261741b669b51a3bf4cceef7d81328c5f774bae53a9626316254d930719591c0888d8cf86ce3e0ac3a2d154f1fb9c4eae1976440a6f636deb6e019b15c5e88b4bb1994ac4fd9737e7243bc1312e523ec046aa5eda63af238eb302fcad34e40c9dcfb8c912f875d11736de32f146cfa696f9d4185b482a375a439396b480a07973e54634048c19d0e1081b3591d4614a81a922b62def96a2c69d9ec87c2f2e618eb4c467644d0fc89f7ad633aa8b6f380c695ab1f654a8dc34b2378b5a4d1c084330bc318d8c165d08b1"]}]}, 0x350}, {&(0x7f00000002c0)={0x2c, 0x18, 0x10, 0x70bd28, 0x25dfdbfb, "", [@nested={0x8, 0x8d, [@typed={0x4, 0x6d}]}, @nested={0xc, 0x89, [@typed={0x8, 0x29, @fd=r1}]}, @typed={0x8, 0x2c, @uid=r5}]}, 0x2c}], 0x2, &(0x7f0000000c80)=[@rights={0x18, 0x1, 0x1, [r2]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x18, 0x1, 0x1, [r2]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, r17}], 0xb0, 0x24000010}, 0x20000004) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) 16:11:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x200) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000280)=0x9) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r4 = dup2(r2, r0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) ioctl$KVM_ASSIGN_SET_INTX_MASK(r4, 0x4040aea4, &(0x7f0000000140)={0x101, 0xfff, 0x2, 0x2, 0x1}) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0xb3, 0x749000) 16:11:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 832.451658] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:12:00 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x100000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:12:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8100000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 832.770442] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 832.863074] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 832.886903] device bridge_slave_1 left promiscuous mode [ 832.896319] bridge0: port 2(bridge_slave_1) entered disabled state 16:12:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) [ 833.003661] device bridge_slave_0 left promiscuous mode [ 833.010694] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.346039] team0 (unregistering): Port device team_slave_1 removed [ 833.376208] team0 (unregistering): Port device team_slave_0 removed [ 833.401639] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 833.471018] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 833.619930] bond0 (unregistering): Released all slaves [ 833.912179] IPVS: ftp: loaded support on port[0] = 21 [ 834.706903] chnl_net:caif_netlink_parms(): no params data found [ 835.016851] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.023478] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.030943] device bridge_slave_0 entered promiscuous mode [ 835.077437] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.084328] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.091888] device bridge_slave_1 entered promiscuous mode [ 835.230821] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 835.280166] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 835.420109] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 835.427940] team0: Port device team_slave_0 added [ 835.498872] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 835.506803] team0: Port device team_slave_1 added [ 835.541167] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 835.577469] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 835.771944] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 835.836695] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 836.166528] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 837.357250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.473893] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 837.581990] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 837.588301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 837.596220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 837.694484] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 837.700593] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.808119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 837.815631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 837.824121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 837.832180] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.838571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.846222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 837.943648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 837.950679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 837.960007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 837.968006] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.974435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.073323] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 838.080205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 838.191526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 838.198691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 838.308329] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 838.315458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 838.325260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 838.333920] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 838.437838] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 838.444930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 838.453570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 838.560288] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 838.567731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 838.577519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 838.685198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 838.692038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 838.699717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 839.330473] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 839.608710] 8021q: adding VLAN 0 to HW filter on device batadv0 16:12:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) ioctl$sock_netdev_private(r1, 0x89f6, &(0x7f0000000180)="3dc8ef59155936690e98b098f423edbb0c39788e609b3cc0aac50f15d5fc6b9e0d96d2066e6904bff2cd40c8a362ada929f5d10c52506b79338ced11ab3515be1b92e5464c80b141d498a46babe8f52988ccc4087a8c089de52727b1d2d2770640cfb1e9c1206db6b37a47505730e9a762ba57b56c21c1a5b720f6fd8fc63663b20dcdcf08597ecfd778d3028fe45845ec10be470c0464c13f3f160529b13e4de9ea3e6195dc35622de3480be0038bf33efee531989feffd3ae02d4b792a87665c03e44d1dbd449704f8f957fcef6e133d9b80891c4eb401008a4c83f00d374a61c0fb29b552dd1744fbcbd86384cfa111") 16:12:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:07 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x4, 0xffffffffffffff9c, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="4a18e3f28dfd3077f87343c6f3489fd15bd92eda6e4a9bb0cb0983210f5892821031011b2bd657a1025852285a964c64ee06f097bafc9a0f77324d51db19cd6da0bb13d7e7a8d66ab05508397f5dbce2d716950d9d3bb2be6774f2f610ebb8d3f4ef4c2156f0a3eec68e1ad6cf0d00f5b9ca33617247d1ae45cd1315796c52179971df0c5f801284761f7427f4307cfff10afe4672776086ef84c81a8f22cac19b45ae92642209bbe29a543a815cf8de8b1206df93ea8c97563544081fc8d4166c15ee2137289b58235dfef4660e65fff198328efe738ece3bd33d9f97103c9845b62936bb1ebe27d0dfa736dff1520b5d", 0xf1}, {&(0x7f0000000240)="a228286789303936f708202253a2b500dd5d0b8c279062602f76dd40bab7b56ccd361db098e11d4e82703d3e50474bcc29489c49bef8bbe10cad89719b2df590c0fb1c5a52d016f65e720a1effb062a1d93333ceaa67c078ca814950b2ea06d2d7b4c194de1c6d8095789b07527615d45f33fdd3ed89ba1bf940396f1fbeb5d3860dbf4219d0e9ac7bed4c7fc7aa138c2dd853f72c74a2fa7537bae9338d2d84d3177f42037db06f9647de4a4bf1247286930fc8a6ee9d39847c75529c8c331d0a07cb98f898f359a4e15e78", 0xcc}], 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000380)={'bond_slave_0\x00', {0x2, 0x4e20, @remote}}) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:07 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) 16:12:07 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x3000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 840.209894] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 840.240771] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:12:07 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup(r1) bind$vsock_dgram(r3, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xc0', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:07 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r2, 0xffffffff) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) r3 = dup2(r1, r0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) 16:12:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:07 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0xc0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfatG', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 840.630001] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 840.721283] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:12:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7, 0x20000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4000, 0x1}) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r2 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="04000000000000000036d759d736edba23437c0f9fe22902e600000a02000000000000000000000000000000000000000000c5ffa42b22ad4c00130133bb3de33b8f88733e1300000000000200000003000000000000000000000040000000060000000000000000000000000000000000000000000000000000006500000004000000000000000000007297000000000000000000000000000000f307000002000000000000000000000006000000080000000024906e6000b37d69457ba2022378318a85aef225854387a596c4d15b6a22321812817fc018be0684d1148a746f929f100000001f000000000000"]) socket$inet6_tcp(0xa, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000140)={0x3, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="4c0300004823e3480002000000000000a56b1b54cf790f37fc4325210c38880ce88f9ef89dfbfd", @ANYRES16=r4, @ANYBLOB="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"], 0x34c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:12:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) dup2(r1, r0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2b}, @FOU_ATTR_AF={0x8}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x6c}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x8800) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) 16:12:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4800}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:08 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x6e01}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 841.324032] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 841.356152] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:12:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0xc000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1040}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1b8, r3, 0x204, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x79c6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x98, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x476}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xc37, @dev={0xfe, 0x80, [], 0x1c}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x20, @local, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x54c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) 16:12:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:09 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x40000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$nfs4(&(0x7f00000000c0)='nfs4\x00', &(0x7f0000000200)='./file0\x00', 0x7, 0x2, &(0x7f0000000380)=[{&(0x7f0000000240)="daf7b46700a01dc037b31b15f41367c8088493078f6aad8b5e8dbdcd33c588e4545a348b4d7ea8e8c59c9fed987187bcdcdf757fd5a2fe830856035e147ea91c9f0c13cd380863e990fb2da897163e79ec130233a99c2e4b1f02aacbedb8c59b257065d106739a3d2c", 0x69, 0x80000000}, {&(0x7f00000002c0)="b777fdfc5f7897b19adcc6390193b16257b64de651ebe85a1b01bc969232eaf290005d935745ab183dcaef3e604d058c4ca868597c2c76b55ff5ab0b3f01f6b4ddee5fad6f27f8bc3597cdf0106310bfeab0", 0x52, 0x4}], 0x1000080, &(0x7f00000003c0)='/dev/vhost-vsock\x00\x0fF\xdb\xfbPJ\x8b\x8a\x17\xe8\x89\xb2\xd2\xbd\xcc[s\x94i\x95\xdd\x94\xcf\b,\xba\a!\xe3`\xc9\xd6\xeb^J\xfb\x18\xc0\x80j*O\xda4J\xf6\xe0\x80Q\x84\x1e\xfa\xe3\xc8\xddq\xaa\xcat\x8b\xc3J\xa1!\xda\xe1\xa9\xde\xaf\xc2\x9bk\xf9CC\xc7Q;\x85\xb8A\xcd\x89\xc7\xe8\xcb*y\xc6~\x14B\xa5Z\xa5Fe\x15-\xaa\x820\x97\f\xb60\xccR)\xb5`\xe0\xff\xc2\xae8Rw<\x98\xe4\xae%=OiB\xe8\xae\xf6\x92&\x13o\xc3g\xa4\xd6\x18B\"\x9ce4OI') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000140)='/dev/vhost-vsock\x00\x0fF\xdb\xfbPJ\x8b\x8a\x17\xe8\x89\xb2\xd2\xbd\xcc[s\x94i\x95\xdd\x94\xcf\b,\xba\a!\xe3`\xc9\xd6\xeb^J\xfb\x18\xc0\x80j*O\xda4J\xf6\xe0\x80Q\x84\x1e\xfa\xe3\xc8\xddq\xaa\xcat\x8b\xc3J\xa1!\xda\xe1\xa9\xde\xaf\xc2\x9bk\xf9CC\xc7Q;\x85\xb8A\xcd\x89\xc7\xe8\xcb*y\xc6~\x14B\xa5Z\xa5Fe\x15-\xaa\x820\x97\f\xb60\xccR)\xb5`\xe0\xff\xc2\xae8Rw<\x98\xe4\xae%=OiB\xe8\xae\xf6\x92&\x13o\xc3g\xa4\xd6\x18B\"\x9ce4OI', 0xa3, 0x3) 16:12:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 841.722067] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x10', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r2 = dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={@remote, 0x20, r3}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) [ 841.861503] IPVS: ftp: loaded support on port[0] = 21 16:12:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0xfffffffffffffffd) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x101002) getsockopt$inet_dccp_buf(r2, 0x21, 0x80, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xffffffff, 0x2) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) socketpair(0x1, 0x24000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x401, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8943, &(0x7f0000000400)='lo\x00\x96o8\x0fL\xa1\xe3\xd7]b}\x1f\xa1Y\xad\n\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x1f]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x06\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0`\xca$K\xc6\xab\x86\x1d\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xe7\x16\x7fT\x11\xd3\r7\xe6_\xba\x8c\xc9*\x7f\xe5\x0f\xc8\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x1d\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18C\xe0\xb86\x83O$\xc0h_8\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4i\xb2&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xf2\xbb\x18\xd02\xc6\xa1\xdd\x19\x80\xdb\xfeWd\xcc\xeb\x8e\x9d\xe9\xdd\xda\xc2$\xa4\xf8\xe5\'\x81') keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 841.995290] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.002849] bridge0: port 1(bridge_slave_0) entered disabled state 16:12:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0xd6) dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) 16:12:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfatL', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80f, 0x10001) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) 16:12:09 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x900}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:12:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8100000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x2aa000) r3 = dup2(r0, r2) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, 0x0, 0x27) dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) [ 842.671899] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 842.680901] IPVS: ftp: loaded support on port[0] = 21 16:12:12 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getregset(0x4204, r4, 0x203, &(0x7f00000000c0)={&(0x7f0000000140)=""/244, 0xf4}) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x39a, 0x3) 16:12:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000180)=0x9210) r4 = dup2(r2, r0) r5 = getegid() mount$9p_fd(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='9p\x00', 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="00c50be45cb479b13c856faf009b2a8dc6c88ba24f13d48cfa08e429e944bde573a33b60798611c4240d16a2f7b6f89404321e991b64e6eb2a88aa6b0778268461ab7434f82b0e2e85ad9b3c6cf2241caa229aac4ddf4cfeaa4ccf7311b2cf3a79299abe828c6e98a4fc", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=none,dfltgid=', @ANYRESHEX=r5, @ANYBLOB="2c63616368653d6e6f6e652c706f73697861636c2c736d61636b66736465663d2f6465762f76686f73742d76736f636b002c7375626a5f757365723d7465616d002c736d61636b66736465663d7465616d002c636f6e746578743d73797361646d5f752c736d61636b66736465663d2c6673757569643d7f637f64736135352d007700322d337d7b352d303665002d75763661627f76352c7063723d30303030303030303030303030303030303035322c00"]) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000100)=0xf90, 0x4) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) 16:12:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000580)='/dev/dsp#\x00', 0x9, 0x40000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x88, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl='posixacl'}, {@loose='loose'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x40000, 0x4a) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000000940)={@remote={[], 0x3}, 0xe, 'vlan0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) lsetxattr$security_selinux(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.selinux\x00', &(0x7f0000000500)='system_u:object_r:ifconfig_exec_t:s0\x00', 0x25, 0x3) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0xe7dd, 0x4, &(0x7f0000000400)=[{&(0x7f00000001c0)="7ba8e6fff2e8b30f6c417e179cbd422d5cf799e865d5496803a0c78a6114c50b456988b41a269fd90b62d4c4778bd615127019c62e3b08d1ab59ceb820f84f1bf109fe59819655075d57beae79550948789efdae8f7ae76822e3daba19e6d8d2a6f62cc5c32e171898f00c897696dc76cf7dded8907f983b8580a59655671eb5", 0x80}, {&(0x7f0000000240)="a2cc97733c4a80a354905ca4d977e57a304608f2c5e50c5af213deb3353cd1016406a4156532b3da9fcb790ab8395d1ccb501274d670d2192c7321128b94305df003217a9feda8d574230cdd2f69efaf532c83d7a57acb27", 0x58, 0x7f}, {&(0x7f00000002c0)="6e507695dacd98961802fd5bfdd84c04602f41d0a7948d96083875a0df09ce458f93fba50b4ea9f010c05408023c3ecb3ad0e8c62b84a5df2c368b1ab44f20debedd5430b7074958e6b70d9f18fa398e2dfbbdfa25daefbb232ed7040798847af570be2a63af3f09dbb8dfa4f599592e229a9b1ec7e5ec231c51252b299df75be72ca39e9b9a032c234e2f0c6592fff3c3", 0x91, 0x8}, {&(0x7f0000000380)="bef26127932a620623c24d373cc08373845f593e88214e95ea457a2e2e446b2c9aa58212b0936df1892e08383369f930819257c26c3814278613dc9e721b4278986974f1279dd887f8a0c472d9", 0x4d, 0x2}], 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030306666662c626172726965722c6e6f626172726965722c73657373696f6e3d3078303030303030303030303030303030312c747970653d6eceab5f2c73657373696f6e3d3078303030303030303030303030303030312c6e6c733d63703737352c6465636f6d706f71652c6e6f626172726965722c7375626a5f747970653d774e8c6e31656d305c286d696d655f74797065776c616e30707070317070703170726f635b297d63707573657476626f786e65743173656375726974797070703173656c66002c6f626a5f726f6c653d2f6465762f646c6d3a636f6e74726f6c002c6673757569643d773900353c3733752d7638353f2d7f6666322d7f3673002d61356533353334362c6d61736b3d4d41595f455845432c66736e616d653d776c616e31656d305c286d696d655f74797065776c616e30707070317070703170726f635b297d63707573657476626f786e65743173656375726974797070703173656c66002c0017929d53354e9112f577410470c0d95e089e361adaf8987769009b9ed76b1ad9705baa35efc37eaf84f2e3bc770284bc22385fee56babdaef17715293b572258e49c4f04569ed52fd3c6fc2056d573db5d6b1cd7c33f23bf260105da201658da70388761f4ee3041351a015f4183674a6e06e275e1d52d67ed40f82388eb27f2530ed59b2cfa4a67a919f62bec786175c19c6b642fcc079491ad6a978322006fb82d8bd2176481f67b4e893029b1ad1863a9bb867ba91b4fe1e2547a2e96c8dec9777150b34e7ba54befc0"]) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x30, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740)='/dev/autofs\x00', 0x40, 0x0) ioctl$NBD_SET_TIMEOUT(r7, 0xab09, 0x7) shmctl$IPC_STAT(0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, r7, 0x0, 0x4, &(0x7f00000005c0)='!^\t\x00', 0xffffffffffffffff}, 0x30) ioctl$KDGETLED(r7, 0x4b31, &(0x7f0000000640)) ptrace$peekuser(0x3, r8, 0x9) 16:12:12 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x300}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 845.074774] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:12 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x2481, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000180)={0x59, ""/89}) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0x2) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) 16:12:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:12 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x103000, 0x0) write$P9_RSYMLINK(r2, &(0x7f00000001c0)={0x14, 0x11, 0x2, {0x0, 0x1, 0x2}}, 0x14) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = dup2(r0, r0) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESDEC=r3, @ANYRESOCT=r0], 0x2d) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 845.443665] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000100)=0x6a71153, 0x4) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000a40)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000001c0)="e3f3a82d94335daf0e884d6b603e88f6d59b9f7e8d94f6b339f41036d3032962be4e3bf0ed9440ec33624b7abacd2a61391f470e48616ef1fad5570791fd56945921bb209b021d519b0e31dcf0a80c2e1b1a2f96cdad6de4f959ca3a16c039500affc09504c2", 0x66}, {&(0x7f0000000240)="5f0812d6d265", 0x6}, {&(0x7f0000000280)="32b0b0a104462cdf2c079b7e116d7e9155c8d43939f3a355b7a7875568419250206c090d496768056cb5eca8fe90f0a7cc1052d1568a581e4820bf8c50c24975f56fe55b1fefd98a76f5ff858a85100210d35f6058b61052da23c390d7f6a0696232e7e2d50e90a5ca9c8068a7f7276b14ad8098a67603ef9111c663ac66866c28741a1c91c9fbf053c98066f73fc6590a2025d76de4574b57f88e5fa90ed4235d70225c", 0xa4}], 0x3, &(0x7f00000003c0)=[@rights={0x20, 0x1, 0x1, [r1, r4, r3, r4]}, @rights={0x28, 0x1, 0x1, [r0, r4, r0, r2, r1]}, @rights={0x18, 0x1, 0x1, [r4]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x38, 0x1, 0x1, [r2, r2, r3, r3, r3, r0, r1, r4, r4]}], 0xb0}, {&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000500)="6b84280fbdadb41d67e24ee0b5a403020b2f594d5cc247598adfb7d01a653b20541ab9ae4b92fa4b25d1cda6636d22f742924d43e93a8ecee2", 0x39}, {&(0x7f0000000540)="f7b85467dd1b75ee3633ac25ebdf5828097817", 0x13}, {&(0x7f0000000580)="1d5db435a0fb15ff18549183e0e2915a55d185a8994591ef1c84e736fa44fb3ce18ee506514cbfcd47df3bf9904cb7427fe68c22de04b67c6bbae1d091e6eea11c193ca2d76a99c38823597feb4e04aaf18eb41df4e2bf83334ba88d3c4c7fd2f9f32a5d0f177bdb6bf3198a05526db8315365406454fca4c4a9ed22ac23cec19b64987d8b784cdc893a4e1d59486a44a466940224fd1601c3788f66f04fbcee99e0d7153fceb7ec1b17491d67bb8ed76406cd0fee779ad48fd6f7831f8fb7f8191ec2f7a2c5533ae6784374f33ff3f8c39a398f2492d345ace2315484832f9d7b279f45685252b7cf233bbc8ede18de94", 0xf1}], 0x3, &(0x7f00000006c0)=[@rights={0x18, 0x1, 0x1, [r4]}, @rights={0x18, 0x1, 0x1, [r4]}, @rights={0x18, 0x1, 0x1, [r4, r1]}, @rights={0x38, 0x1, 0x1, [r1, r0, r2, r3, r3, r2, r2, r0, r0]}], 0x80, 0x800}, {&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000800)="6d2df165c7500ccf761b82895b09f44722b020ce4ab1b9c04fc84df5274bb9a3246a4bd2785ef6407372a394c0", 0x2d}, {&(0x7f0000000840)="50d8e6a2f5e0beea05107d8ea76ad8bf09bdd0b8904c20df3352a93bb0e93a3f6c42e9b9f46884549a0762f6e52ef07d0d6ba1148ec0d14f5942db9c6c1d89123f36a0d58981bd846135308ff378c69668bbb756bffb70e1c6", 0x59}, {&(0x7f00000008c0)="6196c6464bc5261d40c52cb03417e4742772417b1861424614db2f2c68cf8511eb68c0b9e4117410bae08faf47d5", 0x2e}, {&(0x7f0000000900)="333e4acd2f4120dd2a9919c8977c51a4c8952d9908974e1dd20fc1fb95d1beb4bb11f8d3d4ff324c3d0927b98690874df359aee255357d168306f2bd10f439131f88c5bcece360547c2d4cf148ec12fdae971ad4d19b145c09e25a125f5511573e87635b19687536", 0x68}, {&(0x7f0000000980)="af86fcfa1a132b12cc2ee262d5e450149d27a7448fd61fa3ade15cc685873b13bc8bb917d3395af443f0f4cbfd8b88", 0x2f}], 0x5, 0x0, 0x0, 0x20000000}], 0x3, 0x40) dup2(r2, r0) write$binfmt_misc(r2, 0x0, 0x23d) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) [ 845.564825] hfsplus: unable to parse mount options 16:12:12 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x700, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x48144231, @bearer=@l2={'ib', 0x3a, 'vcan0\x00'}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x4005) 16:12:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x04', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 845.678617] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 845.711265] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 845.747662] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 845.780139] 8021q: adding VLAN 0 to HW filter on device ÿ [ 845.801071] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 845.825901] 8021q: adding VLAN 0 to HW filter on device team0 16:12:13 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 845.882287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 16:12:13 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r2 = dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000180)) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) 16:12:13 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x16e}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2, 0x0) getsockname$tipc(r2, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:12:13 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 16:12:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\a', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:13 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x42) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x400, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'dummy0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040050}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) dup2(r3, r2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) [ 846.708909] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:14 executing program 0: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) fstatfs(r0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x4) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sendmmsg(r0, &(0x7f00000002c0), 0x1f5, 0x20007ffc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) socket$packet(0x11, 0x0, 0x300) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r3, r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={'gre0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:14 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0xf37, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}, 0x200000, 0x20}, &(0x7f0000000580)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x8000, 0x5, 0x6, 0x0}, &(0x7f0000000600)=0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000100)=@in={0x2, 0x4e22}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="645065673e0f8d29f275e877c6a7e59dd10211addf9d2d3bf934d2961282b789707a16caa44542593a6d54044690e13cee9cc2f121d21583d918c9386dd33d41dd2066c8223555bb1c0a5afe1df1a2b4057cb7d9", 0x54}, {&(0x7f00000001c0)="862bbe6cfacc891c518cb440d0c583c1b491f1bcd5600c2ba5d2915f30ea1c3bab6de27831be90a4fb8e4a7205b7b2c9d840c31e02bb7e2c13be811cde75221f4494f402186467903d77b8a02470c61a12af3b33f70d6c9db92e134a85809408b84f16a9866a466bcba548169dbc7ab2552de07bde", 0x75}, {&(0x7f0000000240)="0d52e7a300756a0166c4355cde8cad3dcb3277cba80111116cfaf2309ff1cb8e699b0d5b13509b3684094bbac39f957b094c0a313265e90e1e937d9ce240f0e2321df97dff6fd55daafc0236e40c97659a59e2fae482dfd07978035c8b1ca309057cca28f920dac258dd415f11153acaf55c77627ede053269ff0764ba805ae53bef753b3b99bd49b2c5ff646d5e7202faf38ce013f39ab4abaef8ed1b81c8833764b7c70cfea7e69698e2065afc0751ba7cf2350c1146e3c032a8f635bc78a77834e93fb6f6ab7ec663c8c48d1b", 0xce}, {&(0x7f0000000380)="8475043a85b19c24ef3ff73e408da88ada2314d813acf9158e12299b8df21fa4c00e25801e36202c467bc4bc9cbd6add7ea141f7ad056e5594fc4a50cf9c9214eac41add66c596711442936078e4f506ef497cf1ae85ff7b5098bdc1a03edc18a1e0574e467f6990a92d80d09f77c3fe89800cf48ffb1b7fb7abb09681edac038fd1aac2e295d56755a777ffadb1579be9ea83c9afd9fe927daf25a1089ad656a7ab094f1fea037e63580bec08b65396ddc1ac09", 0xb4}, {&(0x7f0000000780)="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", 0x1000}], 0x5, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000000000008400000000000000362b0500010080a0300000000000000084000017010000002000040008000000ffff000000000000010199000000000020000000a78bfe12120ae68a34c9376b64dcb8923e3b5edff664a3cf650dc1b76401762bf2524df6d685f80222abd55bef373abb08ba65b25b4310c4a8437c5fe84f9e91b08f7a1ce464541b76a0d060ed", @ANYRES32=r3, @ANYBLOB="30000000175bbc7e164fd78ff31a8d07be3171cf0200000000050002010000b8bb810b1f05a8f800f8ff0000", @ANYRES32=r4, @ANYBLOB="18000000000000008400000000000000010002000700010020000000000000008400000008000000fe8000000000000000000000000000bb"], 0xb0, 0x1}, 0x4000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) 16:12:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\b', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:14 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:14 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x101000, 0x10) ioctl$RTC_WIE_ON(r3, 0x700f) fcntl$setflags(r1, 0x2, 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x181000, 0x0) personality(0x1000000) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000140)) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:14 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) socket$inet6_udplite(0xa, 0x2, 0x88) 16:12:14 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:12:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6558000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:14 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x80000, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r1, 0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:14 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20800, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x3, 0xdfe5}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r3, 0xffffffffffffff00}, 0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r4 = dup2(r1, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={r3, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x7, 0x1f, 0x8}, 0x98) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f00000002c0)=""/29) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000380)={r3, 0x17, 0x4, 0xc0}, &(0x7f00000003c0)=0x10) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setsockopt$inet6_int(r4, 0x29, 0xdf, &(0x7f00000001c0)=0x2, 0x4) r5 = getpid() sched_getparam(r5, &(0x7f0000000300)) socket$inet6_sctp(0xa, 0x1, 0x84) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) 16:12:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) mq_timedsend(r0, &(0x7f0000000240)="2caa6fac86d4640b2684794633ce47aa8134c1f18ea13005a75e1bfa307a747c200ca3d716c671eda7b1bd1f17ccdb0c353b478773733185b64fd2dd547eb66e3856c866a42fa270b73ce64abf6aac20353295c1e44c467e48b7bdbf40713de9ebb37555ab8c236eb65e1d6bd94953a8fd53dedcdda436b025ae9d8ea64e439f3b81cc008cd554d67d26ae2c391e315e54e54479563e71e188b29eef6d6f570de65855b403e140d24ee893b298f1037d0fe9891e6042097ae276946fff43c84012450d3219", 0xc5, 0x3, &(0x7f0000000340)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x48) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="160000000600000000004bac005de2a237d300000000000001000000000000000500000000000000686173680000"], 0x2e) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000001c0)=0x1f7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x1, 0x70, 0x1f, 0x2f, 0x9, 0x9b27, 0x0, 0xf92b, 0x0, 0x8, 0x400, 0xffff, 0xe0, 0xd24, 0x98d, 0x101, 0x5, 0x8, 0x2, 0x5, 0x3f, 0x0, 0xf587, 0xffffffffffffff81, 0x6, 0x5, 0x3, 0x4, 0x1, 0x3, 0x6, 0xffffffff80000000, 0x4, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x6, 0x7, @perf_config_ext={0x46d3, 0x4}, 0x401, 0x800, 0x9, 0x3, 0x101, 0x0, 0x5}, r2, 0xf, r2, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:12:15 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(0x0, 0x2) mkdir(&(0x7f0000000080)='./file0\x00', 0x83) mount(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x900, 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/186, 0x4a9e280) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x40) write$P9_RSETATTR(r4, &(0x7f0000000300)={0x7, 0x1b, 0x2}, 0x7) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r5 = dup2(r2, r0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x8130, r4, 0x180000000) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @raw_data=[0x8000, 0x7, 0x6, 0xfff, 0x240000000, 0xabc, 0x7f, 0x4, 0x5, 0xff, 0x4, 0x2, 0x1, 0x80000000, 0x8001, 0x1, 0x140c, 0x0, 0x80, 0x7fffffff, 0x6, 0x3, 0x1, 0x0, 0xe93, 0x1ff, 0x4, 0x0, 0xff, 0xffffffffffffffff, 0x0, 0x1000]}) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x1e9, 0x3) [ 847.672367] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:15 executing program 5: prctl$PR_GET_DUMPABLE(0x3) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x20003) 16:12:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6c000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x10', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 847.882149] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:15 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) pwrite64(r1, &(0x7f0000000780)="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", 0x724, 0x0) r3 = dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x2b5) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000)=0x4, 0x4) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 848.181446] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:15 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:12:15 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1b4, 0x3) 16:12:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7a00}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(r1, 0x8) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(r1) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x3, 0x2, &(0x7f0000000240)=[{&(0x7f0000000200)="50e21cc5023010e2d4602b25fbd906d40360197017e594fc3108a38a6c17896d780c5fa98470e0c4330eb9fcaff32df738ba875a2ed7eb2b41630127a8", 0x3d, 0x8}, {&(0x7f00000005c0)="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", 0x1000, 0x100}], 0x10, &(0x7f00000015c0)=ANY=[@ANYBLOB="6e6f6c61726765696f2c6dbbfd3aa85c27dfebda8c5deca0cd5c78d39b200276d3309c1618e4bfc452af07c4d34a415cfe15a3dc934d86eb8c23310f8084db2a5a872784813c57afc5ad1ac395e394896fc449e03d7b54ba4ba6378dba9e664e4eb15e58e6e4e139633f2668d86d159a308cdc8b5d4fc7084c94c5859dd814aec4babf9cdfd166d218f69b55127164ae1d3d4fc8f866a2eb52563ab1468d9612ab8ac0ed58bbf3ce00fc6b4c1b723c7d550f63abf0c1eff6188ae10005b9d40bafff5cabd91a33708acd5edfd34e963db3c76c73b04a085b95db16258b62d25867662b513050355156da921469bf4978087377a5584dc66bb106027876c04b10db35c9ec6ae6431d15c126a2fe4d8d9c01cb7ecc80dd0b670899a63dc14a863a0be79c0607f6666a48383f827d48c6312e591f7ce93ccf5e574baf57555928ef8b3c1c866a2a"]) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x9344b52016ef5d80) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000080)={0x2, 0x100000000, 0x5000000}) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 848.590370] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6c}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:16 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) getpeername(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000140)=0x80) r3 = dup2(r2, r0) sendmmsg(r3, &(0x7f0000002e80)=[{{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @empty}, 0x1, 0x1, 0x1, 0x4}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)='_', 0x1}, {&(0x7f0000000240)="60d1929f40e626615918e460ddeaa3bdffa2c2697038cd7fc9223c4bf390a77ec499da27b260eed70d8875f56b434b73278bcb6d3b17e9730c7e97fbdfa8a5c54853b46aff380fa529ef2635e8bcdf24ea26e307f69a624338f120460d357322aa219149c4de9f9ab19d1fdf93abdbaef9d148a97189d08488c121fc34d9cc27213e83e69977e187d4b1e88441cfd64c71dfb98041446c6eb8edc2c72abaff213907966e38f00e1b3452a64d956cd378203256551dcd5ec1f108c46739aee97bab35da816cdf78f32d85ba8f1d7995e125e7fdb30c6e89c12291cfd702227f98f25f0302fff55786a77c3d9a4f9e8c8ec6", 0xf1}, {&(0x7f0000000380)="af8eb9a746f67e6a231240fd39f766ef63f6a894bf96d4b9d940880137f947deeb4607c29b0c7f0cda20d4776ec8348cb03cb5ae1104dd38600fdc13069742b4105d60f8dca8f14239d9a9ddb91386139187126820dfdc952c231d891eaa0672f2f20825fa260d0367fe2f83d4408c3649419a4d141f09f85b4dbfae1ddb6f4e6736de66574208ec001480198390876790c2e979c194698fe6f267ba292ffbac31965e544e214a05d1b52a81139371ffc80fdc8e2e128f8969d925df1dd6aefb27a939913b0562d2c6194bebe29d16a789c08b", 0xd3}, {&(0x7f0000000480)="8981fe26b7add5a6", 0x8}, {&(0x7f0000000780)="3ca277fbaf499fa168f2a97caa2a66296b9f4f4852e1e7eff8506fd3a319ddc1439bb613670b9bf5e71bd15eeac0c8104d831708ace31da3ef28239ba0c759a5c39e42909304e224ebd05a2bb724f21e004d5ed76f4cae6a4883aad7036d1ff7a2714c0755504991cb57181111cf2e4f4c6b3decdd7fa68cbed76e0cf48c61305d5311642ce13cd2a7147d5bb14947591954613ddf86ebed0abb2e2596a9fd6e17c16370506afd8802cb8347f70222ae560deceecd37732f4b87a7a54efec27f7935f6f8588f49388bb7af0dde9afae5403c8744745733c2b0d914a7f79a679a2b5315804e589cbeddfccf01ae2072d9c643ea2f5ae5f57ea2c744bc2b4688305945144fd005be5aca4dd8ec598d23f4e8c47729e3338a6f77b46488352b6baa96da583d0b1a0ca1ee1989776a1151cdd05fd008bab5a107c95f3c04b540dd966f0e741fcc141ccb8d6ad358762133391eb7ccc74a23215bbacdf541286a3060a8c16ff0a6464fd1eae17509db056c154f2918c945f0a0e71d5a1ed1c6e57fbc08f4b2336b47a2b9cdbc116573e3ef58d9f213a838e5ba7c5aa84c76a390348d60dcef6ebcec610bc28229f75923593924c5d2684e89ca0c6515d21b8aac137f0e4ee994e00f714dd82940bb2b62904991e156d6d5eebc6c5515d65914518ceded6536ae5277be31f233ae54342de4a9357967358946b4ea7d8b19ab71fc87a8b72c9b2d3746e609febc4ad54393d74a1ad306a8b860ebb1c1847608e705beb9523c129874e9043f99f9c8f7f934f37b8724086acd9484e5c6cd3660256538fb06629ad56a8c7cba52b442d91a5cc99e21fdbd7da94e1342833b407ae2f32870db96b27b11e9c5894e6349a06c8e949c00f80ac2d18e3547215ab41822b8c7b0b0053c80d5e0e68703eeb809928ff5cc3f20fc5f1688eb92e1f057b12dcc89b2f61c82a7ad1a09a54db4d4039b95af35dabfb45fba6a56aa8e6d592d64791afbab71cd28b8971a96647d27e3ebb8fb5feb4c3bc613879c2f24473635478d92ee9da34682b711c06380d27088a35baaa6414fa316343d65c9ed205944fe319cfb6a99e9b8a086cfb7b501d211ae93aadeb6a41b6865ab753290a56199d40612508010cb5f3801987768719255a2e2eafff5da8086f0a7abb519aea0bf9161cf1ece9ca456c36a5361e296cee480983fff3ef092f5bb600a1e8197716e20a38d23e4364d8d8268a8dd905b27990705e7103552bf96af9b593c3eb2eb7ecbd8392b76583516dcde302360abd11e2a7485980f800df63676e8afe73ff36d49702665dab440c973325478fdb549ced36105a869c3e4cccbce76c37242f6fc6ecbf557f64aaf5ba60a3b418b04763432d08e6925c43b1318597f37f0834feec86a7404539d7fa70eb64069eb35adaa1936e56ce0b04b7e68718d1a0ccd491418d7e80a8331bd5f029648284b1617b267576bc0c13c0138416b9334cd871d5cbdc113b92d9f38fc78d6f84e5cd1608dfb644fa332d7e7a04df56dee8d3fcba7a62fcfd8652c88d2feafd99de9c703d5ec750a049836d22e9d7854d0ecfc4240e00840f72cda1eca3ba16909dacb6db501f7eda8f6ebdf06ee6e196a6206640e9fc5be3a4d47eb337fb3dbf23506aae5b3bf53c04f7ec303aa60c4f7f1970bf684636f8bfaaa567783b2303a6429180eca130e48629731ea178675d7b33d2f2bc1fbd2e13e1c3ff5b69058c426bbe3628b0368f54f010c81eadb515d9b3f1d99ecfa813f6e614510f3fee08226a98ce17ebe36b42550fc9630f948215a43e7da76a2e8dc886257f8997116dbcfe0d1e4a9c70cc3c9389178ca5940d795a5437c2c825316318e64bad05c01f8b2f46b0814b921fe0569664c8314061d959206a71b8e53ed4678599eb10d58eec1fdc76e0250d611280842bd0f6378c6be420c01078970759d81ee72b46c2f09d2bf0df0d38be6f79b47428375b1d3faae3c6441bb13486eb8c24a170786e682dbf55c07f089c5b415cdcedbda2b69f5a1d6c63b4682de215df4d5876dfdc2a68ec07b8c8ec462ae7c8c9f12d78ed1b1d2d69739b15836f37eaf25b452c0640533dbd73731a90c0734fdb2ee910fcc9777123aaf3ac52edf4e8517e85f1affb2086c5e470d729291c07c587b86dcaec7c11a17d651a4231168651970c9847146d7a311ba3c7c4a52a06c2f22c71035881ec5dd3fb09f1f030d79933782069acbdb0cd9764cbaec78db6ca17d134f93f27b02e3347389be759c85107402c37ef253433c20de01fa339d92f7c20f3f2864bb0a12df46eb5a5942e5684453588bc4ddd6f57459724932b19fba30dd47a1fc91f01ccab2e6441396d344bb596e002fcc0fca60a60bb77a45a063980c757473c1a79c0236c0622ae09ea0cd8ab4c852bca4abb3b1518776582f2372ffc1ceafa2d0005c94cfbb8e889a56dbb34197ab7d3f8c98309f002dde5db513236c2ac70c97ea76fdf0e3594e1f3031a16d02019d21f7ed6e8d857e5d1188c1492312f1491463e3ab7cfe8d3b16f4dc2eb71613f1da28e2e960ec86a8994f30f73e5c258307cfd3b60e5e896edf62e6b220d45c440127694219956f041afa7d12d464350bf8a5c670cefa5bda207c957cf4d2ba9c07e361f3aa3de3c5991b406d4be5d8363a1db3c2c7de8296f58b9133261af7458deebca753af2492d35e339d93302169215221f6ad897bc016598b8ddf4053f1fdf93184d3e5497cfd20c7d0608b96c2d3b6e5eef9f8fef39f3e14a56564367189169e520dd18a32235cb030037a8794c9a6b23c22c624f847a2d7df2ecba16eb0c1d3e77bc656d6cb1ecc8d873c46e8e28048ac780db9ef2975bd9a09ef06bc689fdb00c2a4f9271dfb0b5c0b62a4d8645d3d704dafe2723398f5bf0bcaa1b1c5a0f1a70d2a7a19db29cc6bff69e9ea8913d93a20546b36ce4da2f15b448f015a3e007cc315928620cdf3f67fb74c6e7eb0622e71f8e3f41c025a9812866ca16940b338035fbad7339c03712bbb94d4b4dd350617bba548df0ae5c4df91bc7c48f559300d197eefc51853a169ae38bd22cd9f5bc756bc9d250be139385f0c2d43979fdce32564e762946dda20d2bb55d5326cba424982ce8d71228b4e52ded9fff395e6e92d9690eb614d54ceca204083695c8aad6714709a67b009bcc8575d8a3d0025855477c4b3787f1f802b5d918b7b73ba2c8f5d2a1b86783a8db70955b243275464f3535952c182330f7db1ad586ad59b62ec8597c7ea86bf255d1f4883170e8ff7c4081296a698b78eba6d72b22134c1629cb31570b6dc0e03abe628762144783a4d33c8ece2710f1b235027ebd03bf05f1c64b2b7526f60f981556e666c1ff0b3ef56f57ddd4c7eab03cf80054ceb2f37909bd1cb10caba883fad6efd96c796f39d643f98100123210514c34c1bab688e96885d51accb7376c5f33ae48b10b8f0365bd698a31eb59d6d6a05d20a086dd63e008564f81061addb6ec339362516f7250f1beacddf6d71278819f7b2b65cc46cc38c1c7c95736fc610ad2f3f11af39d1f9e8cfcd054439dd3178afab34adaf00158e1d3e055f60d41d5b8abcff47a0750b5a4ae356d8c62479dc0c9832214d62e6f2976767e89845ee3ac3f7bde26ded1fa8f4781b893aacf2e8ef365331551cbc4fb46e85c7832f291d338609b087b9737e343d43644a4993c9a9becebd86f33d5c3eaa7c7afe21dfb8c6c6d0fe95594482adc2ae7ac39d59b9cba4dc6ca09662898e739d57494cb59420f6f4f95ab1aa76fa987cc92371293682d6d1e7ea5ed3328d3a015d67b0066f024d976f7d211da82b45a24a2bc23472ea47ba81b0d42b77d9f33b303b0a0fd34585420bcd91153421676a3b1d41b022a16f3d3cd19d6dee25cf92bffe2da4d00e51e3c475435b89a46f1dfe22a883327acf9bd806f66f1ef3b1073da3450a75104e8717d314e878228b1926311b29f28df6764290224499cc6d6ea52ba5fd78cfa17f1b4ee3f3d153e5bc35b2b88672a420816b49815eb910a481d75192097c25ef5cd986cde06fc7348d06f2e0c0b499a640363fe4e48e05ac78d11b539f460dd01232b0d94d901ec0dd8cf8b0cf38239c6133eb1bf10b6c3382d4d8e2e6ddd0da33d430a8a9f830262b2b12b6be67b655b756960dc71a2dd7a67f750a9a9f58c64f0b341e27c015fe4a1c80b8d8f2403e3ef78be2d3d4fa9aa69bcb80319ade09376e7006c9a8552571e7340b8b142031b5799b6862e144ec22f37acaafadb9680531da35dc06ff27f3b3c413f1f0ecbab9725bfda0ad356fe394c416e267be8a878b0e62cd07c11166a5ab0d4add7f18bc5d55d3994c7033edc6019fde6229b20c6e67a03d2e66acdadfcdb3bef42b86fd4387116f0f4ee9582bfbc265b5b2b5cfbb3c42692e8716e8bab5830ab9285a9c0bda9b5bfeaecc93edda0f3b4a7199eee0ab4b3f2e715c843ff59430acdf3ff15f9497cbe4f885a875d2e7ea932fe17fcf210ac4e58388bdbc80cbcad513240c88f0edf75d66b5edae5b3cd4f1edc0063f10098cfb58713bf0c909d4435e2683d6ff727a666a9279483e5f709fb8113cd350cf648197a91569382439fc3ebb76d805d290571cf37dba33ea9fac0b142a0f2b45df5d7ac0b64565a40131848a4ff08fae68694000845b64cb83f43e8329379378a6ccf3d8b90e56f988cdaf790b385f3ad9a6fafd42a2afbbe19063c22389ee6b08bbb4db6f0b07b1c280d166efde0bd58e63fef96bd90d7184cd450e4a7386e39b147e6ce77bd37ef5e0854d8dd6b1ac615ddf8e548cffc0f81b08af716f1fc2137e8ac7f2c4090401c941e7db7f02f0e40b9be001afe4f20d004d5e5a404387691fc9b4bb5b2e585a8fb3b14cc9507fc3d58a05600f4e8a48f0c56ffd9256d15dbf92f4bce08f1bf16d982ef64524f49891a8d0435644684fe114715934af4c029826481e71f80e98943b1a4527ef42dbd1b5197eee4b1f020ad77290a780aecac07e471f9071f2525602c36bc01df3600d3420402b50ff4459f8d496840eb76e7d678a1d04133dbec3327c7bb519674da1679973858f879367d7e6e77b3f29e22fcc6ce576ad3bd002c1183cbff2514d4da7d6ceead6b75f7ce8d797c914e8db8e8af2ad30ecff627187ff80a5712790d1836100ac91b6e6b46a0cd99c387eb3236e453400994a9d7833c40dc643b90f84b1778df464e8672a7b4d55421f401f4bb776c0ce63a3e739864ba1e152b397b70822dfb71e930e0c44836c880cbaae4beb72bf15925944704a627bd82db2d00b8c25e197f0cb666206870fa291632309ee2c0f38eb75142f2006d1eecc7b31fa1ecfbef058e3a2c775bae96631b3275f5973d6ffb916f4152ee3fb8195780c30766bf57acc45e4401608027ccaa9efb87f701109342443a27f7caa96f6891ed80fe0d35c6484dc77d56f50cc847ee9e44b7c03acaac984d2234dbfec4dcf80ff23492719614de7db16ec286804d1afc70d5e1c348ed7e8e30637c827777c511c8e0f4d11fc70f4a0f4b136141d17f384a93d7056a51a83962d764439d61225ae21b0e8e4bb7ada013a574efc324b74c460218294a6276839916a2c6118aea41e45234fcd40e8712d47d1bf28c4edc71524f09eb3361374935ad25a1e346d178dd940febfd68b754c20bbd19a9a41305ad27eeaeb9bf194a74ae1061292756fbfeaf0dcf42bf975628d7a461476359bfbaed92aec49b2735679c1843ae6f588b164b98225890206ba852c755152f2379e24324c8495beb37d6e0c4e2670623b", 0x1000}], 0x5, &(0x7f0000001780)=[{0xc0, 0x10d, 0x4, "5ae3f82244212d52cc6afc1818921a973f0e60509ffec96b4fcbacd35b45b3f53f9a188fff4642da990bb3a4e99f82ad455c64dfe4e74e896c33d230e1b89cbbd6dfe5f9b9a7ac14614fba33261d7066507c6bb95a1d1dc2ffde39815a7d14f18363b941f11b0627961f8c7c9c197617404e7f981c9a2f0b584c05a3501028344049f33c2e10f2533ccda259f82cc876305055be4b77249d2f6a1cc8dea0346f929de89186d30e4098097404a8112d82"}, {0x60, 0x111, 0x2, "d3021c0ff59f242553b2c12735aabf40971332fcae2f5c99c80deda41d8e91488058bfb7d9e64a90f59440742423cf157fce72511c0004a30322fec4c406c93c4ffb21ba047eafdf8a946c2ac498"}, {0x108, 0x19e, 0x9, "4014df1eabb00cc48ed37c80c9f235bfaa12d4c82565c0c2023f40348ab8a748066a3cbca7def0f3baf1a1ff77ef4b1d5e54f957bd917775b05d6233b25ffdbe099a7a0879e52b3109966d3cebcf654f04d721c96dc8630ca4a83c013f53e4b8643b431f88e30668938841df1b12fd47a67ab763992f35e9a988d850abbd9a0fcb3e5d044facc1434eaa62dd944744d96888e87b424aedb2f654e56e45a4c297b236bbf2fc13e4753e005f29b461c86e260354f519753c3bae7a21013cd3f7d0064a8578ff2908407acd6d5821868f231195bb42c75cf4eb1a8a33047ffe0c211ab423e3a5a1f41a920cee9b9fe4337cd142ae"}, {0x68, 0x1, 0x10000000100, "561aa18c26ac40ea40a1a5f93db2710fa21a3ecb685e23623e4f57b667bf7be7246394fa52276c7a472eb491877cef456d39b6c15265926d61c73fc870d92be3a6201b4fca4297cf89890dbd16aa8242df37ec"}, {0xd0, 0x11f, 0x100000000, "51589d7b9b57e3e3ffa715dc2b3b87f0071635873b80f1e12ff50324976c5f16a14644af2f91b654b67752bf5309e0e860be10b359ff009ff7854be8597bcb472f0b4669d1ffe6b4b3b95e51118990808eb517a07734fae409560eac411f188d4cd6af624a301026e0f89dc245a283016c43449da87645da9a3632ebace425d28c4ef9c6a2688f92f528f5bbed1aa59d2cc08f03ee49ab164e31b6fcc6674af3980bc030e3f416208900d9e22339de3d9870fd3ec14aa0152d31ab874bc01d"}, {0x58, 0x1, 0x1, "33aa79209abd9648335794a97ab4097403f3114e864c72e0761e52044655a83e1bce1a51f5bd2d6e508a932a9ec256bf5598f7803a8d163fa4f79f800bc916229568d656db9efe91"}, {0xd0, 0x10f, 0x1, "1b2f42e1a815ad77879e4f35284cc1b50ee110730479f60f2d50bfee3180cba57f3bea7ecefbfb82bf4f0576184fb8b0bd8770f06c0c86bcb5b84bf0f6d9e73518f12308d09433b2757ca15ec1b9a8dc7608c21524275a1fe540db643efded6f07e5d1abcf20d9e5ec50ad6383b174359a971b2771bd3f6b64ff42c9b01bf2ced18fe39d8cea4465b6b8d21aa227cf7202a3f86eb90cfd04dbc41c6b0e78d90b2c79590a05c81fc5516db2aae87473e33fac3865702919e5b81d"}], 0x488}, 0x8}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)="84e3d23cc8264cf7b7666821f5f1f1e97d70b8734b579c704aca417b5b3b365fd2688e3d043a40dd948abdf61ae378dc6df60bb61b67302dab1de89042d023cdb22313a423880d2204fcb6224d89910a21718587a36b446f517717034cdd6a9981c18fa1916f30f6db78f441a4c2ff0dad7b4547a2c39dd2ba88e4d24d7cd9c88de7a7dd9f98b7f206d20423bd08f83a3e58d0b4a356ab9662e550143c8caa085ad457ecd639f752b7fd50f74fef4690bb837ad8e68b4833af6b0bf001e2c7266eda8e3e5119b2fb2802", 0xca}, {&(0x7f0000000640)="511d99b52c61795f9bc228294e68ee8b8fefcf1d1c562d1401a41509d1be7b8e2de69c4fa370960b2c08e8ddd42057091238875e37cb81744b13439aea18f3f00a67ed5988d21ce7de747dadb42ccf6ce989fdaaad54ad8a6ce19d492ced", 0x5e}, {&(0x7f0000001c40)="d4a65d112ad9dd1a6772891cd67e14f51f9d7655a207b60b7378615696082a00676b010ab7bd1ed7928225f80d04a99afb718140c38acdf914828b209168f90a0bd8ea0b54ba3f53c6ef4c736f747b31d93fb2a41bc5536cdac068225f3aadec7b6b55b41bea7e89e6f256c38d2052ffeaa150ebcf5752f38cd4e3249a5ff54c00af8250e3843c962828d382a2cf323a6e148cb7053928eb", 0x98}], 0x3, &(0x7f0000001d00)=[{0x1010, 0x101, 0x100000001, "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"}, {0x88, 0x100, 0x54b, "05c95027b49cb19518d5b8362b5c304f3a661a9918b3d5ed5f89692a96050958a2fb16e60090945cf98d056c4ff2a95c5aca093403e7f3847df131c2738e0de873377808cce090a0a734522b1bfd7ac25f94e1753456bbe895393412abe0d1bd9f10b62119b2a19c26245cab7ea2c25360"}, {0xb0, 0x0, 0x6, "3f4760e92fce7beef2d8f792aad0a81dee16b15b7ad90f68d26ce30256da07dccb5c7f763dc215af37dedac18aa28ffe1e02237ab82cdf2a79161cb6ed81edf8303874bebb670e68732af40e20cc1d931e461ea9052bef95cf6fb350ca17756a8d3bd9c728b975242882a032ca18d427eadbac2ecf4c2c0d529bd6bde4c7ebbbc3f1b7b7889ee8c94753421c89f5cd49c11a76e9dd296ffce4"}], 0x1148}, 0x1}], 0x2, 0x4000) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) 16:12:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:16 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = dup2(r2, r0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000780)={0x1ff, {{0x2, 0x4e20, @empty}}, 0x0, 0x9, [{{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e22, @rand_addr=0x1000}}, {{0x2, 0x4e24, @broadcast}}]}, 0x510) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 848.887248] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 848.956513] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7400000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 849.034905] XFS (loop2): unknown mount option [m»ý:¨\'ßëÚŒ]ì Í\xÓ› vÓ0œä¿ÄR¯ÄÓJA\þ£Ü“M†ëŒ#1€„Û*Z‡'„0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x7, 0x7, 0x400, 0x1, 0x4000002, r3}) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) [ 849.131418] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 849.342584] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:16 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x10000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:12:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfatH', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:16 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) inotify_init() dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) 16:12:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x5, 0x1, 0x7fff}) 16:12:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 849.608711] device bridge_slave_1 left promiscuous mode [ 849.632054] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.684780] device bridge_slave_0 left promiscuous mode [ 849.691670] bridge0: port 1(bridge_slave_0) entered disabled state 16:12:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x5402, 0x0) 16:12:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x62001, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f00000005c0)={"8156a3371bc0ac955a875cb9428a08263b9a7a0d3ed4e820895c83ce507b2ecff39937ac245d4191de90caa0ecc8af5b316fe7a1159bfb33d4e23474c0ac7629000c7adf49cecf8c54a8c02d4ca671c52d7b54a6e4f88c93c7e7aa26659bf61ca626dda84773644b010498731e7b6263b2800a82222e29b16f636380b98809515e7c8567855b07a0b3bf55263a3f870da37f161cc1dc10ca028d119f05b1e95bba1a66ad7547bd60010e1505e7cb44e186f44444ff458276e10335792bda6fa61d08e57c6989092cd62ae7d059cc2d598ca25500452e7cbc91318481a1d0cc0dfb750fdfc3ad9b3e6add9643c1708d3ef5ab01f4eebb45584311d702c8a4f86c9735dd9fc051bca692ad261ac5b3178d7eda3c88195423ebbcc25fcacfddbb9502c7f7cad546207ce50ffa5be2ff40e88f90780812f675382c34a23c059ae5edabfa67726202f4b727a2e331df0dc8e8657e618943f4be907c4ac14b0f4dac2b9a392a53038fd1a6c63771c1ab4c720e7b22f43b881ac1b6068eb41cc0b28738be475c20a85c8b30d75ec15644d8363efa150aeaae2807cc81efa2d1110a03de3f5493cfc8c7496e4c0ea27742f0043f956c60f44387f2681c3ef2a067ba24ac48b14574943496d95174189e397453771a95ad3dca2ff5ba33d9a25e91a4dc088e558ec0e6884b927db8d382cf2f6dced979418fbccf14a4d7111a588d48ab992691b209eb55268e918294554b8fd526c5b6b2c7db90af13f142047c74eda3a3c99b60a7b226de919cf323d398c73554119504b9da077fee92a4f6408f99ce686847278489be1fc47a4b68bdc5ade93a8dce66fee4625c1323a40048faba2d493f09b57d49ef8a1817d90303d61774e7c515476928ebaf5b034906c23dda1c65a7b3cf1899caab9f46d12fa1e56f0eb9a7a6e971bba49060120cd38102ba02364b74f553b87db55b75421def7883d0315993fa78c7545a1056f7350813390daa667315a867a8d3f36db4b2111cca1dd62d523468a3bde6053db4f5d12742c6b1f4a0fc3398d1cfa8798800dd9d18b28087a572509cf7534e208f57d934b88a28e84027b7d6792f15b2ed170223d229318d6ad5b14e6dcb0791c7fbbf30bb35f22faa331b51e5bd863ed9135e48a1472f451f9ca6d52ee270c22075c5a464d431c92074c8667546eacb28e8b7b11cd8c4136a3c1640cf1763d5524e3061bd1a80706a6e274fa008efc14abfc5fb1247ab237b91ced16ddb46db77a3d2e191ad77afbddf1cb04868956afea5e9c27ec3abf620bce10f0f02d8d3e90d353bcb5cb9b30e184c73af5cb702f63db38ecba368b5adfe3848770d31a5368d2c3d24ae6a6a83e7fd0799fb2148c8b8e054854789cd5aaf9ec2295eda8222d172c3a302dc1e8972ddc52fedbe64fe0b39aa5d81c0c7fe8aaa5ba09d50981c5a12e7a0f6f1"}) clone(0x1011ffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x100000000, 0x100) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000080)) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 850.022756] team0 (unregistering): Port device team_slave_1 removed [ 850.092132] team0 (unregistering): Port device team_slave_0 removed [ 850.120034] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 850.180866] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 850.317436] bond0 (unregistering): Released all slaves [ 850.610715] IPVS: ftp: loaded support on port[0] = 21 [ 851.631295] chnl_net:caif_netlink_parms(): no params data found [ 851.974539] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.980970] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.992521] device bridge_slave_0 entered promiscuous mode [ 852.047365] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.053931] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.061402] device bridge_slave_1 entered promiscuous mode [ 852.176814] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 852.213511] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 852.306773] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 852.314378] team0: Port device team_slave_0 added [ 852.343910] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 852.351051] team0: Port device team_slave_1 added [ 852.382440] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 852.417664] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 852.533205] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 852.570324] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 852.880959] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 854.006168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.111691] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 854.218779] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 854.225151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 854.232518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 854.334374] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 854.340467] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.445788] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 854.453097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 854.461084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 854.468977] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.475391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.492591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 854.590147] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 854.597434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 854.605474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 854.613188] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.619586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.723164] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 854.729992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 854.844457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 854.851272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 854.965265] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 854.972366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 854.981566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 854.989728] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 855.089195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 855.096169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 855.105442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 855.211723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 855.218621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 855.227693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 855.330388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 855.337493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 855.345288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 855.967290] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 856.240111] 8021q: adding VLAN 0 to HW filter on device batadv0 16:12:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom$unix(r1, &(0x7f0000000140)=""/225, 0xe1, 0x40002000, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x5b) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x101000) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) r2 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x10000) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:12:24 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x10}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:12:24 executing program 5: 16:12:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x81000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:24 executing program 5: [ 857.268580] validate_nla: 1 callbacks suppressed [ 857.268605] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:24 executing program 5: 16:12:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000400)="0a5d1f023c126285719070") r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000001fc8)={&(0x7f0000000000)={0x1d, r2, 0xe00}, 0x10, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x1}, 0x23, 0x0, 0x0, 0x0, "0327e19a2b0100000000000000f9030008990039966a7d5c037dc125030000ffa0000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) 16:12:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfatE', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 857.489526] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RSETATTR(r1, &(0x7f0000000080)={0x7}, 0xff8f) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000004ce300000000000001"]) 16:12:25 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x500, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) futimesat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{r4, r5/1000+30000}, {0x0, 0x2710}}) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000000c0), 0x1) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7a000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfatL', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:25 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) pwrite64(r0, &(0x7f0000000580)="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", 0x200, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) fcntl$setstatus(r0, 0x4, 0x4401) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:12:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:12:25 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x1000000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 858.238808] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 858.486543] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 858.765791] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 858.845016] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) bind$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0xc2, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(r1) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:12:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat&', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:26 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0xf, 0x3) r3 = semget(0x1, 0x1, 0x480) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000140)=""/203) 16:12:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 859.204679] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x5100, 0x0) 16:12:26 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x3f000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:12:26 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 859.641073] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r2, 0x0, &(0x7f0000000180)='\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:12:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat ', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:27 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) ptrace$peek(0x2, r0, &(0x7f0000000140)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r4 = dup2(r3, r1) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000000)={0x2c, 0x4, 0x0, {0x2, 0x6, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:27 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x8}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 861.179270] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:28 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:12:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xff', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:28 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0xa0000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @remote}, &(0x7f0000000180)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@mcast1, 0x50, r2}) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r5 = dup2(r4, r0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x3df}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000480)={r6, 0x81}, 0x8) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @remote}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000300)={r7, 0xf8b}, &(0x7f0000000380)=0x8) 16:12:28 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x6e01000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:12:28 executing program 5: [ 861.917531] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:29 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x40000, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000140)={0x6, 0xdc, 0x2, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10001, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r4 = dup2(r2, r0) flock(r2, 0x8) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000180)) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'veth1_to_bridge\x00', 0x400}) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xf0', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x100000001, 0x5, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:12:29 executing program 5: mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) capset(0x0, 0x0) 16:12:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:29 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x800000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:12:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x05', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/if_inet6\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x2, 0x0) 16:12:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 862.823324] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:30 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x400, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r4 = dup2(r2, r0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x3, 0x820a, 0x401, 0x100, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000180)={0x400000000000000, 0xcb1, 0x1, 0x8, 0x567, 0x745, 0x3ff, 0x5, r5}, 0x20) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000400)={0x42, 0x3, 0x3}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x11, 0x3) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @pic={0x7fffffff, 0x0, 0x26, 0x5, 0x1, 0x9, 0x80000000, 0x400, 0x3, 0x1, 0x8, 0x2860, 0x7ff, 0xff, 0x8, 0xb939}}) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000440)='trusted.overlay.redirect\x00', &(0x7f0000000480)='./file1\x00', 0x8, 0x1) 16:12:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 16:12:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x700000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 863.068639] input: syz1 as /devices/virtual/input/input9 [ 863.126703] input: syz1 as /devices/virtual/input/input10 [ 863.400042] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 864.038277] IPVS: ftp: loaded support on port[0] = 21 [ 864.452767] device bridge_slave_1 left promiscuous mode [ 864.458468] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.523229] device bridge_slave_0 left promiscuous mode [ 864.528742] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.355298] team0 (unregistering): Port device team_slave_1 removed [ 868.366892] team0 (unregistering): Port device team_slave_0 removed [ 868.378124] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 868.428039] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 868.529034] bond0 (unregistering): Released all slaves [ 869.155825] chnl_net:caif_netlink_parms(): no params data found [ 869.534448] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.540908] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.548749] device bridge_slave_0 entered promiscuous mode [ 869.594602] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.601022] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.609365] device bridge_slave_1 entered promiscuous mode [ 869.751680] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 869.801286] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 869.949191] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 869.959486] team0: Port device team_slave_0 added [ 870.027824] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 870.043630] team0: Port device team_slave_1 added [ 870.087418] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 870.167202] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 870.369769] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 870.416931] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 870.865658] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 871.384048] device bridge_slave_1 left promiscuous mode [ 871.389605] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.422930] device bridge_slave_0 left promiscuous mode [ 871.428371] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.529096] team0 (unregistering): Port device team_slave_1 removed [ 871.549125] team0 (unregistering): Port device team_slave_0 removed [ 871.560435] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 871.607077] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 871.705622] bond0 (unregistering): Released all slaves [ 873.201294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.341205] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 873.490035] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 873.496702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 873.512553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 873.618284] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 873.624468] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.730763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 873.737913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 873.748929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 873.757217] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.763649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.778042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 873.868793] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 873.876067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 873.884725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 873.892912] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.899282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.005025] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 874.012095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 874.130539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 874.137825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 874.258381] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 874.265595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 874.274438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 874.289843] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 874.390328] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 874.397347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 874.409705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 874.522355] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 874.529197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 874.539327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 874.656390] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 874.663436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 874.671884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 875.296577] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 875.532750] 8021q: adding VLAN 0 to HW filter on device batadv0 16:12:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:12:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:43 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x6400000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:12:43 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_elf32(r2, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x199, 0x7ffff000) 16:12:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd2010000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000900)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000009c0)={0x0, 0x652}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000a40)={r3, 0xff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f00000007c0)={0x0, 0xfb, 0x105, 0x7, 0x3, "4ff9412dcd9102d64fb642c6930dd849", "8a4e0df44776a2440b43211fa9d4fe8c5da09f9f62a2eef1dbda13e27198f63e365b378bcf48b6d4532ea8b994621aead61f6777648db59e0150dd5bd1522fdd1bb2ec36f1d0e93aa7933f19e9fd96ede8ae5001173c83db365187aa0b389d4621b7b117ed39e391db26f2e317bddcf7627d0c31e5e7fcb4cdb829c57c1be2c3318517f0a1fa74e7363d5d06e5846857722d8d1c5119dd185febef3891bcd583c2a4e78ab50226714e0d1b473c166d1f2230858c3205c1f6f31cc68fac8e2658d5ba086d58e1816e3cc56ad9b93aefe07cfe79e7fe629dff997d1dbdbfa866f81af39c0217b648319fa654d38d6e2887"}, 0x105, 0x2) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) r4 = dup2(r1, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) syz_mount_image$erofs(&(0x7f0000000180)='erofs\x00', &(0x7f00000001c0)='./file0\x00', 0x5a7, 0x2, &(0x7f0000000300)=[{&(0x7f0000000200)="deb1222cb8f9ccfd0fcb56c28527025cdcf61fd57d4abc482f71ab05c23a2fbff61514677b8c7ea0a091addb6df24dbe2189d05007c63a42ddc69284fae33bcb43608c7d7e75d160384db1a7c4628554858b74283eaf4a55dea7644ca874319299b18c320558fc0cff125208a02450ca210fa0596a30c88482b72f5c711023dead2bdadc6004635640a2864428d15adb338ddac996443d4d1f5a816bd1d91aad922a80bf69e5b40f5499af43186da3651e46342e7cae9ca59b6c7ce15e874283820b8ad7920e5ed06b51f2fc97c1dbb2010c6e46c7", 0xd5, 0x6}, {&(0x7f0000000400)="fe86b995e95abda3a497434f79d763dbc5c69208ebc8ee4aacc543d1f6c7e095eaf8720dde1381ad11d0d07c63ba49e1dd390f02fccdd056d18640a138ffdf4444d64bee11afc3ed872275ee51", 0x4d, 0x1ff}], 0x40, &(0x7f0000000480)={[{@noacl='noacl'}, {@nouser_xattr='nouser_xattr'}, {@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x9}}, {@fault_injection={'fault_injection'}}, {@acl='acl'}, {@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection'}}], [{@dont_hash='dont_hash'}, {@dont_appraise='dont_appraise'}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vhost-vsock\x00'}}]}) recvfrom(r4, 0x0, 0xfefd, 0x1, 0x0, 0x28) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000140)={0x8, 0x8, 0x1, 0x0, 0xfffffffffffffffa, 0x8, 0x4, 0x9, 0x101, 0xfffffffffffffffe, 0x6}, 0xb) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000640)={0x0, 0x4, "3774ec775cc061575facfd420fd0f327cc58a8f691eab81459c0eab732d2a9ea", 0x2, 0x7, 0x5, 0xffffffffffff4f67, 0x7, 0x3e68, 0x1, 0x1, [0x252f, 0x0, 0x0, 0x6]}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x101, 0x20, 0x1, 0xff}, &(0x7f0000000580)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000005c0)={0x1f, 0x7, 0x4, 0x9, 0x0, 0x5, 0x7, 0x40, r5}, &(0x7f0000000600)=0x20) 16:12:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xa, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0xc) [ 876.015193] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x24000004, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0xe5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x10, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=0x0, &(0x7f0000000180)=0x4) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000001c0)={r4, 0x0, 0x80000001}, 0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 876.310116] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 876.336742] device lo entered promiscuous mode [ 876.375112] device tunl0 entered promiscuous mode [ 876.404887] device gre0 entered promiscuous mode [ 876.436085] device gretap0 entered promiscuous mode [ 876.469219] device erspan0 entered promiscuous mode [ 876.495241] device ip_vti0 entered promiscuous mode 16:12:43 executing program 5: syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 16:12:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 876.536957] device ip6_vti0 entered promiscuous mode [ 876.585089] device sit0 entered promiscuous mode [ 876.665764] device ip6tnl0 entered promiscuous mode [ 876.697091] device ip6gre0 entered promiscuous mode [ 876.719740] device syz_tun entered promiscuous mode [ 876.766310] device ip6gretap0 entered promiscuous mode 16:12:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) socketpair(0x13, 0x6, 0x7ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:12:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 876.800363] device bridge0 entered promiscuous mode [ 876.845314] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 876.890616] device vcan0 entered promiscuous mode [ 876.911477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 876.922315] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 876.955046] device ÿ entered promiscuous mode [ 876.986266] device bond_slave_0 entered promiscuous mode 16:12:44 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x3f00000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:12:44 executing program 5: 16:12:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfatN', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 877.035547] device bond_slave_1 entered promiscuous mode 16:12:44 executing program 5: [ 877.083994] 8021q: adding VLAN 0 to HW filter on device ÿ [ 877.123673] device team0 entered promiscuous mode [ 877.166231] device team_slave_0 entered promiscuous mode [ 877.209037] device team_slave_1 entered promiscuous mode [ 877.243829] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready 16:12:44 executing program 5: [ 877.259634] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.270722] device dummy0 entered promiscuous mode [ 877.310246] device nlmon0 entered promiscuous mode [ 877.402435] device caif0 entered promiscuous mode [ 877.407557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 16:12:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r4 = dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000000c0)=0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r2, &(0x7f0000000180)={r4, r0, 0x80000000}) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:44 executing program 5: 16:12:45 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000000)="c5", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)) [ 877.691423] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 877.770449] device lo left promiscuous mode [ 877.844093] device tunl0 left promiscuous mode [ 877.866505] device gre0 left promiscuous mode [ 877.894082] device gretap0 left promiscuous mode [ 877.938541] device erspan0 left promiscuous mode [ 877.965512] device ip_vti0 left promiscuous mode 16:12:45 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000300)=0x6, 0x4) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x408400, 0x8) syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x363be21c, 0x2001) r3 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:12:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 877.992556] device ip6_vti0 left promiscuous mode [ 878.003792] device sit0 left promiscuous mode [ 878.047545] device ip6tnl0 left promiscuous mode [ 878.065386] device ip6gre0 left promiscuous mode [ 878.080224] device syz_tun left promiscuous mode 16:12:45 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x6e01000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:12:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r4 = dup3(r1, r0, 0x80000) r5 = getpgrp(0x0) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000000c0)={0xfffffffffffff1d3, 0x9, r5, 0x0, r6, 0x0, 0x2, 0x8}) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:45 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x208204) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000003700)={0x0, 0x40000000000009, 0x100000001}) 16:12:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 878.099539] device ip6gretap0 left promiscuous mode [ 878.109529] device bridge0 left promiscuous mode [ 878.116329] device vcan0 left promiscuous mode [ 878.127834] device ÿ left promiscuous mode [ 878.134494] device bond_slave_0 left promiscuous mode [ 878.142634] device bond_slave_1 left promiscuous mode [ 878.163871] device team0 left promiscuous mode [ 878.211957] device team_slave_0 left promiscuous mode [ 878.254621] device team_slave_1 left promiscuous mode 16:12:45 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x363, 0x0) [ 878.288913] device dummy0 left promiscuous mode [ 878.319216] device nlmon0 left promiscuous mode [ 878.330599] device caif0 left promiscuous mode 16:12:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d2}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40000, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfatz', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0xfffffffffffffffd, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000000c0)=0xd67, 0x2) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:45 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00') [ 878.601629] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 878.696260] device lo entered promiscuous mode [ 878.709027] device tunl0 entered promiscuous mode 16:12:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x7ca8, 0x4) userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:12:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfatM', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 878.803190] device gre0 entered promiscuous mode [ 878.827940] device gretap0 entered promiscuous mode [ 878.879088] device erspan0 entered promiscuous mode [ 878.901607] device ip_vti0 entered promiscuous mode [ 878.945925] device ip6_vti0 entered promiscuous mode [ 878.981323] device sit0 entered promiscuous mode [ 878.996809] device ip6tnl0 entered promiscuous mode [ 879.010741] device ip6gre0 entered promiscuous mode [ 879.026627] device syz_tun entered promiscuous mode [ 879.046374] device ip6gretap0 entered promiscuous mode [ 879.067677] device bridge0 entered promiscuous mode [ 879.078013] device vcan0 entered promiscuous mode [ 879.086004] device ÿ entered promiscuous mode [ 879.091756] device bond_slave_0 entered promiscuous mode [ 879.100040] device bond_slave_1 entered promiscuous mode [ 879.109214] device team0 entered promiscuous mode [ 879.114941] device team_slave_0 entered promiscuous mode [ 879.120892] device team_slave_1 entered promiscuous mode [ 879.127314] device dummy0 entered promiscuous mode [ 879.132996] device nlmon0 entered promiscuous mode [ 879.141510] device caif0 entered promiscuous mode [ 879.147923] device batadv0 entered promiscuous mode [ 879.153347] device vxcan0 entered promiscuous mode [ 879.158510] device vxcan1 entered promiscuous mode [ 879.163743] device netdevsim4 entered promiscuous mode [ 879.169266] device veth0 entered promiscuous mode [ 879.174737] device veth1 entered promiscuous mode [ 879.179831] device veth0_to_bridge entered promiscuous mode [ 879.185972] device veth1_to_bridge entered promiscuous mode [ 879.192089] device veth0_to_bond entered promiscuous mode [ 879.197984] device veth1_to_bond entered promiscuous mode [ 879.203985] device veth0_to_team entered promiscuous mode [ 879.209919] device veth1_to_team entered promiscuous mode 16:12:46 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x4000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:12:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00\x00\x00\x00\x00\x01\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x0) 16:12:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfath', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 879.216992] device veth0_to_hsr entered promiscuous mode [ 879.222752] device hsr_slave_0 entered promiscuous mode [ 879.228394] device veth1_to_hsr entered promiscuous mode [ 879.251104] device hsr_slave_1 entered promiscuous mode 16:12:46 executing program 5: io_setup(0x1, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 16:12:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6c00000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xff', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 879.468930] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:47 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) unshare(0x400) r1 = dup(r0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) 16:12:47 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0xc8, 0x4, 0x1f, "c6a9d20aed0d30f5a2d4c71f586d086cd3d566e41774393bdaf92506dd585081656e01a4c641640629ede4cf2986addb96c522c0550a5cb22fbbd01cc9b639edb3525141197f20f2c3b2373c26eb83dfe002da868ecea05fd8fc44bf5a2a9295cd91ddaa5592d59b9e49c7e544882173fa75a13f1f40e7ad1684ca1472e9a26544887f13ac08765fcec3950278c5403ef9b8333af9338a355d23fa7827630d6e6ee2003f7ff95bb2e0ad2c516c87455665af7866e2674356a18b922cb94010c1eaa462635279449f"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x4) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r4 = dup2(r3, r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f00000000c0)) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 879.688675] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x3e6) close(0xffffffffffffffff) arch_prctl$ARCH_SET_GS(0x1001, 0x3) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1, 0x0) userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:12:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x74000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 879.988209] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 880.091045] device lo left promiscuous mode [ 880.128334] device tunl0 left promiscuous mode [ 880.150125] device gre0 left promiscuous mode [ 880.165983] device gretap0 left promiscuous mode [ 880.182867] device erspan0 left promiscuous mode [ 880.187787] device ip_vti0 left promiscuous mode [ 880.200462] device ip6_vti0 left promiscuous mode [ 880.208519] device sit0 left promiscuous mode [ 880.222183] device ip6tnl0 left promiscuous mode [ 880.243162] device ip6gre0 left promiscuous mode 16:12:47 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x3000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:12:47 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, &(0x7f0000000180)='&e$\x81XK%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo-\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\xcc\x13\xce\x88\xd7R\x10\x87~\xa5\xff\x1bP\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\x01\xb2\xc4\xf5$\x18O,3\xecZ\x8eW5\xcf\xfe>\xd9=_\xfdd\x06\xd6a\xe7\x9b\x83\xd4\xf6\x90\xcdt\"\x93\xaa\xc2#\x94L\v\xac\xe5\xbbU\xae\x8bRO\x03\x99~\xb5`\x06\xfd\x15es\x0e\x87\x8f\xbc\xa3\x8f\x96\xa9Y\x13\xe2\xb2)\xec\xd6-_\x03jqE1\x18\xffE\x15_\xd3\x11\x98)qR\"o\x80\x1a\xd9\xb3)\x9e_\xa0\x13\n\x8b\xdd\xa22\xce\xf43') 16:12:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 880.256639] device syz_tun left promiscuous mode [ 880.261961] device ip6gretap0 left promiscuous mode [ 880.267340] device bridge0 left promiscuous mode [ 880.272533] device vcan0 left promiscuous mode [ 880.277429] device ÿ left promiscuous mode [ 880.282396] device team0 left promiscuous mode [ 880.287577] device dummy0 left promiscuous mode [ 880.292646] device nlmon0 left promiscuous mode [ 880.297644] device caif0 left promiscuous mode [ 880.313399] device batadv0 left promiscuous mode [ 880.322225] device vxcan0 left promiscuous mode [ 880.327301] device vxcan1 left promiscuous mode [ 880.332436] device netdevsim4 left promiscuous mode [ 880.337848] device veth0 left promiscuous mode [ 880.342935] device veth1 left promiscuous mode [ 880.347940] device veth0_to_bridge left promiscuous mode [ 880.354006] device veth1_to_bridge left promiscuous mode 16:12:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x1, &(0x7f0000000180)=[{&(0x7f00000005c0)="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", 0x1000, 0xccbc}], 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB='norecovery,quota=account,quota=account,pcr=00000000000000000042,fsuuid={;s18\x00\x002-s7f\x00-=7ws-3w{\x00-65w350we,subj_role=hash\x00,context=root,euid=', @ANYRESDEC=r2, @ANYBLOB="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"]) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 880.360039] device veth0_to_bond left promiscuous mode [ 880.365836] device bond_slave_0 left promiscuous mode [ 880.377323] device veth1_to_bond left promiscuous mode [ 880.407681] tmpfs: Bad mount option &e$XK%×äœãÁ™Ž/}iRÕ @ZáØè 懓Òa6ZÓAO%ÚÛû$¹Qw.HOo-Ê_Êÿþ…ë$»¥Z@]­t;ó•‰(|ž¸C‰6Û‰ à})Dî’ò‚ãC?ÌΈ×R‡~¥ÿPïqH€ðmìæ34I”h!(.¼­xƒ´˜ãŸ}'Ìõs‚ ²Äõ$O,3ìZŽW5Ïþ>Ù [ 880.429874] device bond_slave_1 left promiscuous mode [ 880.440884] tmpfs: Bad mount option &e$XK%×äœãÁ™Ž/}iRÕ @ZáØè 懓Òa6ZÓAO%ÚÛû$¹Qw.HOo-Ê_Êÿþ…ë$»¥Z@]­t;ó•‰(|ž¸C‰6Û‰ à})Dî’ò‚ãC?ÌΈ×R‡~¥ÿPïqH€ðmìæ34I”h!(.¼­xƒ´˜ãŸ}'Ìõs‚ ²Äõ$O,3ìZŽW5Ïþ>Ù [ 880.456994] device veth0_to_team left promiscuous mode [ 880.482329] device team_slave_0 left promiscuous mode [ 880.506007] device veth1_to_team left promiscuous mode [ 880.521454] device team_slave_1 left promiscuous mode [ 880.530975] device veth0_to_hsr left promiscuous mode [ 880.543560] device hsr_slave_0 left promiscuous mode [ 880.574359] device veth1_to_hsr left promiscuous mode 16:12:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xfd61) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 880.597513] device hsr_slave_1 left promiscuous mode 16:12:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4000010004802) io_setup(0x51, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000016c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xc58ea4b}]) 16:12:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f0000000200)=0x1, 0x8b, 0x1, &(0x7f0000000280)={r3, r4+30000000}, &(0x7f00000002c0), 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000300), &(0x7f0000000380)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000480)='/dev/vbi#\x00', 0x2, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f0000000140)={0x0, 0x80000001}, 0x2) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r7 = dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) write$P9_RSTATFS(r7, &(0x7f0000000180)={0x43, 0x9, 0x1, {0x1, 0x9, 0x4, 0x897, 0x6, 0x101, 0x300000, 0x4, 0x1}}, 0x43) recvfrom(r1, 0x0, 0x3e7, 0xffffffffffffffff, 0x0, 0x0) write$input_event(r6, &(0x7f00000000c0)={{}, 0x12, 0x7, 0xfff}, 0x18) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x208204) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000003700)={0x0, 0x40000000000006, 0x100000001, 0x0, 0xca}) [ 880.870368] gfs2: invalid mount option: pcr=00000000000000000042 [ 880.887333] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xff', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 880.924495] gfs2: can't parse mount arguments 16:12:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c00}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 881.119051] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:48 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000002000010000000000ffff000002"], 0x1}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00\x00\x00\x00 \x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={&(0x7f00000002c0)={0x10, 0x5865}, 0xc, &(0x7f00000056c0)={&(0x7f0000000200)=@ipv6_newaddr={0x40, 0x14, 0x90b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @dev}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x352}}, 0x0) 16:12:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000180)={0x3, 0x1, [0x6, 0x9, 0x4, 0x4, 0x6, 0x1f, 0x5, 0x8]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:12:48 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x8}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 881.443186] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 881.462522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 16:12:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000040c0)='/dev/sequencer\x00', 0x2, 0x0) recvfrom$inet(r1, &(0x7f0000004100)=""/14, 0xe, 0x2000, &(0x7f0000004140)={0x2, 0x4e20, @broadcast}, 0x10) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0xffffffffffffff7c) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) r3 = request_key(&(0x7f0000000600)='asymmetric\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)='allow_other', 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f0000000540)='eth1\\^\\self}+mime_typesecuritywlan1]Y\\\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x4000, &(0x7f00000009c0)=ANY=[@ANYBLOB="66643de19beed789373f4d7a445d38cd907512d8b50500a5be850b6171df665e3a2034148b94ad2391b3a083e78d67c3f49fb441d04075cfe3610266ceedc4fa60d9994ff845534ff037fc0c393bb611d3740349f06f874d6b9e699da8c4bca955e70c01018b548b2556bd5510fe95416a262fc414299b1a20b52ae3622368232b567f7e06c8d876bb477ff9c823104598e822951bff878de6c51a523633b4523e82a3ee43faff8aa9eaa6f7786bf9f27a4a1926", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB=',blksize=0x0000000000000200,allow_other,max_read=0x0000000000000004-euid>', @ANYRESDEC=r6, @ANYBLOB=',measure,fowner=', @ANYRESDEC=r7, @ANYBLOB="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"]) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000005c0)) 16:12:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f00000000c0)={@multicast2, @dev, 0x0}, &(0x7f0000000140)=0xc) bind$can_raw(r3, &(0x7f0000000180)={0x1d, r4}, 0x10) 16:12:49 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x0) close(r1) [ 881.721551] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x1, 0x0, 0x0, 0xfbfff024}, {0x20006}]}, 0x10) 16:12:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 881.916524] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f00000000c0)={0x0, {0x1, 0x53, 0x3, 0xffff}}) 16:12:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x41001256, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = dup2(r2, r0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0xd6c, 0x600000) write$sndseq(r4, &(0x7f0000000740)=[{0x1, 0x401, 0x100000001, 0xff, @tick=0x1, {0x6, 0x80000001}, {0x101, 0xab81}, @ext={0x7f, &(0x7f0000000240)="9106839cd74c3f6fc8709d557d238cae18777977dd2761574da311f7a3b9ec0b36e8252d207ab4a6b6c61b4f4170ba0850228523dfe501a6f280c98568658ebf913c2b7d9496e3e09125e514afce34128025820f21753d30530107a574043883885cb966bb9982180023a5be3a06a695dd781589027e8bcc539672276d4f67"}}, {0x3, 0x10000, 0x2, 0x80, @tick=0x7ff, {0x4, 0x5}, {0x6, 0xa4}, @result={0x9}}, {0x24f, 0x72bee7cb, 0x3, 0x1, @time, {0x9, 0x4}, {0x7ff, 0x2}, @control={0xfff, 0x7, 0x501}}, {0x4, 0x3f, 0x6, 0x0, @tick=0x4, {0x5fdb, 0x5}, {0xffffffffffffffe1, 0x2}, @queue={0xffffffffffff0000, {0x6, 0x8}}}, {0x2, 0x64, 0x12d, 0xad6, @tick=0x401, {0x0, 0xee}, {0x4e0, 0xffffffff}, @result={0x81, 0xc1}}], 0xf0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_buf(r3, 0x0, 0x27, &(0x7f00000002c0)="af58cd2ad44e6ea84aa2f081f9f137aefd5101427f356e102a036cf612914e0f23b65c9856d0fbf18c932c48f6735bf5f46238db8336e334d3e65aba451c72e267be1613ec1312813afeb9909b", 0x4d) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000600)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r5, 0x1}}, 0x18) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c40)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000840)=ANY=[@ANYPTR, @ANYRESDEC, @ANYRESDEC=r4, @ANYBLOB="6dc11604dc03bf695de48bf381f81988045c844d90420ba00f0f54b87e0da8c57d44cab7e69ead7fb7543b501a584ef53fabcce43805f2896636505bf54195aaa7c116a00f089c1255ccafab7f5df64d07072fa3cc76abc8a0d85def381fab7933aba9e792fcd4fe8b2c8ca8fb096b3667030e4e9eb9015a605733fbb6da1bc0f43d550f49f118897f81af644f21d02230c1402f2252933adc2d", @ANYRESOCT=0x0, @ANYRESDEC=r1, @ANYRES64]], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000de000000000000080000000000000000000000000000000000"], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800e800000000000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bbffffffffffffffffff0000ff00000000ffffff00ffffffffff0000ff000000000000000000000000000000000000000062637366300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000ff00020310000000000000000000000000000000f00010010000000000000000000000000000000000000000000000002800657569363400000000000000000000000000000000000000000000000000000000000000000020005452414345000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x3) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 882.331058] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 882.373721] device lo entered promiscuous mode [ 882.386953] device tunl0 entered promiscuous mode [ 882.398361] device gre0 entered promiscuous mode [ 882.415518] device gretap0 entered promiscuous mode [ 882.438206] device erspan0 entered promiscuous mode [ 882.462781] device ip_vti0 entered promiscuous mode [ 882.467946] device ip6_vti0 entered promiscuous mode 16:12:49 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 882.551261] device sit0 entered promiscuous mode [ 882.602319] device ip6tnl0 entered promiscuous mode [ 882.607485] device ip6gre0 entered promiscuous mode [ 882.643928] device syz_tun entered promiscuous mode [ 882.649164] device ip6gretap0 entered promiscuous mode [ 882.659314] device bridge0 entered promiscuous mode [ 882.667458] device vcan0 entered promiscuous mode [ 882.677182] device ÿ entered promiscuous mode [ 882.684544] device bond_slave_0 entered promiscuous mode [ 882.693846] device bond_slave_1 entered promiscuous mode [ 882.699680] device team0 entered promiscuous mode [ 882.711405] device team_slave_0 entered promiscuous mode [ 882.717419] device team_slave_1 entered promiscuous mode [ 882.729859] device dummy0 entered promiscuous mode [ 882.735339] device nlmon0 entered promiscuous mode [ 882.760228] device caif0 entered promiscuous mode 16:12:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000001c0)='ip_vti0\x00') r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x30440, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'hwsim0\x00', {0x2, 0x4e21, @empty}}) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) fchdir(r2) r3 = accept(r1, 0x0, &(0x7f0000000040)) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000080)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 16:12:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f0000000680)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffbd, 0xffffffa0}}, &(0x7f0000000200)='GPLz', 0x5, 0xff7b, &(0x7f00000006c0)=""/195}, 0x48) 16:12:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x50200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x1006}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r4, 0x3f}}, 0x18) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) ioctl$TIOCSBRK(r3, 0x5427) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 882.788438] device batadv0 entered promiscuous mode [ 882.838459] device vxcan0 entered promiscuous mode [ 882.843861] device vxcan1 entered promiscuous mode [ 882.861213] device netdevsim4 entered promiscuous mode [ 882.875096] device veth0 entered promiscuous mode [ 882.881661] device veth1 entered promiscuous mode [ 882.894609] device veth0_to_bridge entered promiscuous mode [ 882.902378] device veth1_to_bridge entered promiscuous mode [ 882.916744] device veth0_to_bond entered promiscuous mode [ 882.930799] device veth1_to_bond entered promiscuous mode 16:12:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000140)={0x2, 0x1000}) accept$inet6(r3, &(0x7f00000001c0), &(0x7f0000000200)=0x1c) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000240)) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0xc, 0x3) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000180)) 16:12:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 882.948266] device veth0_to_team entered promiscuous mode [ 882.972179] device veth1_to_team entered promiscuous mode [ 882.992198] device veth0_to_hsr entered promiscuous mode 16:12:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000140)=0x80, 0x4) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000000c0)="22de") [ 883.011659] device hsr_slave_0 entered promiscuous mode [ 883.030081] device veth1_to_hsr entered promiscuous mode [ 883.048279] device hsr_slave_1 entered promiscuous mode 16:12:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="3b00000002"]}) 16:12:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f00000000c0)={0x6, 0x98d0}) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 883.257640] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 883.286443] device lo left promiscuous mode [ 883.291116] device tunl0 left promiscuous mode [ 883.304712] device gre0 left promiscuous mode [ 883.346660] device gretap0 left promiscuous mode [ 883.355163] device erspan0 left promiscuous mode [ 883.360203] device ip_vti0 left promiscuous mode [ 883.373862] device ip6_vti0 left promiscuous mode [ 883.379069] device sit0 left promiscuous mode [ 883.388877] device ip6tnl0 left promiscuous mode [ 883.425114] device ip6gre0 left promiscuous mode [ 883.448224] device syz_tun left promiscuous mode [ 883.471402] device ip6gretap0 left promiscuous mode [ 883.490977] device bridge0 left promiscuous mode [ 883.504400] device vcan0 left promiscuous mode 16:12:50 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x900000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 883.524333] device ÿ left promiscuous mode [ 883.542345] device team0 left promiscuous mode [ 883.547384] device dummy0 left promiscuous mode [ 883.578879] device nlmon0 left promiscuous mode [ 883.583746] device caif0 left promiscuous mode [ 883.592317] device batadv0 left promiscuous mode [ 883.597243] device vxcan0 left promiscuous mode [ 883.615974] device vxcan1 left promiscuous mode [ 883.620728] device netdevsim4 left promiscuous mode [ 883.635708] device veth0 left promiscuous mode [ 883.640423] device veth1 left promiscuous mode [ 883.651251] device veth0_to_bridge left promiscuous mode [ 883.658143] device veth1_to_bridge left promiscuous mode [ 883.700822] device veth0_to_bond left promiscuous mode [ 883.725866] device bond_slave_0 left promiscuous mode [ 883.731291] device veth1_to_bond left promiscuous mode [ 883.753202] device bond_slave_1 left promiscuous mode [ 883.790689] device veth0_to_team left promiscuous mode [ 883.814310] device team_slave_0 left promiscuous mode [ 883.838685] device veth1_to_team left promiscuous mode [ 883.866018] device team_slave_1 left promiscuous mode [ 883.887386] device veth0_to_hsr left promiscuous mode [ 883.920555] device hsr_slave_0 left promiscuous mode [ 883.941115] device veth1_to_hsr left promiscuous mode [ 883.964817] device hsr_slave_1 left promiscuous mode 16:12:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000040)=""/18) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x202000, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x802010}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x24, r4, 0xf08, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x933ca98}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c001}, 0x20000040) 16:12:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:51 executing program 5: r0 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) pipe(0x0) r2 = dup(r1) io_setup(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, 0x0, 0x10d) tkill(r0, 0x1000000000016) 16:12:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:51 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) close(r0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), 0x14) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x0, "1ae9679c2374dc8ac8555978c0e19863637b152580177ed5bf1b8360a469ecc99f6afbcaa7d9673365dce0502644ef7dca20c18a6ba4330c06665be85a8738dedfab27fb89c42f61b030a2ab04bab2a7"}, 0xd8) [ 884.278426] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:51 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) [ 884.448221] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 884.484515] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:12:51 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x300000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 884.528333] 8021q: adding VLAN 0 to HW filter on device ÿ [ 884.601132] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 884.610364] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.652140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 16:12:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:52 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'trusted.', 'vboxnet0&system\x00'}, 0x0, 0x0) 16:12:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xff', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'ip6gre0\x00', 0x43}) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1000005) 16:12:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) 16:12:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpgid(0x0) migrate_pages(r4, 0x0, &(0x7f0000000280)=0x3, &(0x7f00000002c0)=0x6) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r5 = dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x5e55b64fe6ca84a0) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000140)={@multicast2, @broadcast, 0x0}, &(0x7f0000000180)=0xc) sendto(r1, &(0x7f00000000c0)="70e30aa3d870775fe92f6506721ef944d3dbf1f34b4d1684a3630d532867de824f9236281121a5114a238813d9dd6265cbb1d810ad1094ba20aaf44c6e9f1f72", 0x40, 0x4000000, &(0x7f00000001c0)=@hci={0x1f, r6, 0x1}, 0x80) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000380)={0xf9c0000, 0x7, 0x1, [], &(0x7f0000000300)={0x98090c, 0x8, [], @value64=0x1f}}) ioctl$BLKSECDISCARD(r5, 0x127d, &(0x7f0000000240)=0x2) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={r4, r5, 0x0, 0x11, &(0x7f0000000440)='/dev/vhost-vsock\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r4, r3, 0x0, 0x11, &(0x7f0000000400)='/dev/vhost-vsock\x00', r7}, 0x30) [ 885.289178] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:52 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20}, 0x1c) 16:12:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:12:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:12:52 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1001, 0x2000000000071, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8ccc8a43a4b71b48f122aad26a207ba5f73a433ce6863368a09708f37997559ae0b7fca4dab3fe6d9c62e4231f79b174bba913ffdf9be26a0a531abe129fa660", "6016f05f03f8e0d27d1243d186df978c570826b17b518fe294926e8ffb73e0e2"}) 16:12:52 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x10000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 885.747182] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:53 executing program 5: socketpair$unix(0x1, 0x80000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x805}) ioctl$sock_ifreq(r0, 0x400040000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9\x00', @ifru_ivalue}) 16:12:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 885.852793] device bridge_slave_1 left promiscuous mode [ 885.863818] bridge0: port 2(bridge_slave_1) entered disabled state 16:12:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x04', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 885.974803] device bridge_slave_0 left promiscuous mode [ 885.980323] bridge0: port 1(bridge_slave_0) entered disabled state 16:12:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4800000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 886.289215] team0 (unregistering): Port device team_slave_1 removed [ 886.329075] team0 (unregistering): Port device team_slave_0 removed [ 886.360859] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 886.429991] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 886.630972] bond0 (unregistering): Released all slaves [ 886.782013] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:12:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000080)=0x78) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:12:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x8c', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 887.380734] IPVS: ftp: loaded support on port[0] = 21 [ 888.165394] chnl_net:caif_netlink_parms(): no params data found [ 888.481742] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.488329] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.495642] device bridge_slave_0 entered promiscuous mode [ 888.530402] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.537322] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.545085] device bridge_slave_1 entered promiscuous mode [ 888.690188] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 888.725536] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 888.868285] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 888.875691] team0: Port device team_slave_0 added [ 888.909885] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 888.917050] team0: Port device team_slave_1 added [ 888.950220] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 888.982182] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 889.101075] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 889.132041] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 889.443756] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 890.543784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.647722] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 890.749989] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 890.756496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 890.763860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 890.872978] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 890.879104] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.996542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 891.003785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 891.012182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 891.019917] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.026354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.034311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 891.139162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 891.146615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 891.155044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 891.163028] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.169397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.278012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 891.285278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 891.404414] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 891.411289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 891.527903] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 891.535104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 891.543848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 891.562603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 891.660291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 891.667711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 891.678068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 891.792140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 891.798957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 891.808534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 891.921106] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 891.928293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 891.936451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 892.541436] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 892.802659] 8021q: adding VLAN 0 to HW filter on device batadv0 16:13:01 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x80000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = dup2(r2, r0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x3b, "16a7509396cce18f757ed0add4daa7b2b5add642890d93463c0caa1ae3b986a106638954907cfbb277ef8b6059e21a58dd972564aea608f3b40a75"}, &(0x7f00000000c0)=0x43) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000001c0)={r4, 0x3, 0x3, [0xff, 0x5, 0x6]}, &(0x7f0000000200)=0xe) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:13:01 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x64}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:13:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80, 0x0) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='sessionid\x00') getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfatl', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 893.821680] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 893.842437] binder_alloc: 10792: binder_alloc_buf, no vma [ 893.857442] device lo entered promiscuous mode 16:13:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x04', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 893.868477] device tunl0 entered promiscuous mode [ 893.873248] binder: 10792:10796 transaction failed 29189/-3, size 0-0 line 3035 [ 893.887631] device gre0 entered promiscuous mode [ 893.903295] device gretap0 entered promiscuous mode [ 893.920315] device erspan0 entered promiscuous mode [ 893.929832] device ip_vti0 entered promiscuous mode [ 893.946516] device ip6_vti0 entered promiscuous mode [ 893.958412] binder: BINDER_SET_CONTEXT_MGR already set [ 893.967680] device sit0 entered promiscuous mode [ 893.980065] binder: 10792:10806 ioctl 40046207 0 returned -16 [ 893.997281] device ip6tnl0 entered promiscuous mode [ 894.004293] binder: undelivered TRANSACTION_ERROR: 29189 [ 894.008942] device ip6gre0 entered promiscuous mode [ 894.025531] device syz_tun entered promiscuous mode [ 894.064204] device ip6gretap0 entered promiscuous mode 16:13:01 executing program 5: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@empty, @mcast2, @dev, 0x0, 0x0, 0x0, 0x103}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) [ 894.101495] device bridge0 entered promiscuous mode [ 894.119220] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 894.143213] device vcan0 entered promiscuous mode [ 894.164160] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 894.181095] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 894.201193] device ÿ entered promiscuous mode 16:13:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\n', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 894.209987] device bond_slave_0 entered promiscuous mode [ 894.219279] device bond_slave_1 entered promiscuous mode [ 894.230552] 8021q: adding VLAN 0 to HW filter on device ÿ [ 894.249436] device team0 entered promiscuous mode [ 894.259017] device team_slave_0 entered promiscuous mode [ 894.268677] device team_slave_1 entered promiscuous mode 16:13:01 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x0) inotify_init() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000500)={0x92, 0x7d, 0x0, {{0x0, 0x79, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x15, 'vmnet0nodev-cpusetlo:', 0x12, 'eth0&-proc[)&wlan0', 0x14, ')md5sumtrustedeth1/&', 0xb, 'em1%cpuset-'}, 0x4, '#GPL'}}, 0x92) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x9) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000040)=ANY=[], 0x445144e9) fdatasync(r0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) [ 894.310299] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 894.344942] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.405178] device dummy0 entered promiscuous mode [ 894.460259] device nlmon0 entered promiscuous mode 16:13:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xfd', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 894.542188] device caif0 entered promiscuous mode [ 894.547222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 16:13:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)=""/201, 0xc9}, {&(0x7f0000000300)=""/46, 0x2e}, {&(0x7f0000000380)=""/243, 0xf3}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f0000000780)=""/148, 0x94}], 0x8, &(0x7f0000000840)=""/98, 0x62}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/167, 0xa7}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/14, 0xe}, 0x8}, {{&(0x7f0000001a00)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001a80)=""/185, 0xb9}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/193, 0xc1}, {&(0x7f0000002c40)=""/147, 0x93}, {&(0x7f0000002d00)=""/121, 0x79}], 0x5, &(0x7f0000002e00)=""/169, 0xa9}, 0x9}, {{&(0x7f0000002ec0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000003200)=[{&(0x7f0000002f40)=""/2, 0x2}, {&(0x7f0000002f80)=""/129, 0x81}, {&(0x7f0000003040)=""/112, 0x70}, {&(0x7f00000030c0)=""/32, 0x20}, {&(0x7f0000003100)=""/188, 0xbc}, {&(0x7f00000031c0)=""/47, 0x2f}], 0x6, &(0x7f0000003280)=""/76, 0x4c}}, {{&(0x7f0000003300)=@can, 0x80, &(0x7f0000003480)=[{&(0x7f0000003380)=""/132, 0x84}, {&(0x7f0000003440)=""/56, 0x38}], 0x2, &(0x7f00000034c0)=""/7, 0x7}, 0x7}, {{&(0x7f0000003500)=@nl=@proc, 0x80, &(0x7f0000003640)=[{&(0x7f0000003580)=""/157, 0x9d}], 0x1, &(0x7f0000003680)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000004680)=@x25, 0x80, &(0x7f0000004780)=[{&(0x7f0000004700)=""/75, 0x4b}], 0x1, &(0x7f00000047c0)=""/232, 0xe8}, 0x5}, {{&(0x7f00000048c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000007d80)=[{&(0x7f0000004940)=""/50, 0x32}, {&(0x7f0000004980)=""/4096, 0x1000}, {&(0x7f0000005980)=""/179, 0xb3}, {&(0x7f0000005a40)=""/4096, 0x1000}, {&(0x7f0000006a40)=""/75, 0x4b}, {&(0x7f0000006ac0)=""/139, 0x8b}, {&(0x7f0000006b80)=""/21, 0x15}, {&(0x7f0000006bc0)=""/184, 0xb8}, {&(0x7f0000006c80)=""/4096, 0x1000}, {&(0x7f0000007c80)=""/217, 0xd9}], 0xa, &(0x7f0000007e40)=""/9, 0x9}, 0x2}, {{&(0x7f0000007e80)=@rc, 0x80, &(0x7f0000008240)=[{&(0x7f0000007f00)=""/216, 0xd8}, {&(0x7f0000008000)=""/32, 0x20}, {&(0x7f0000008040)=""/42, 0x2a}, {&(0x7f0000008080)=""/11, 0xb}, {&(0x7f00000080c0)=""/207, 0xcf}, {&(0x7f00000081c0)=""/84, 0x54}], 0x6}}], 0x9, 0x0, &(0x7f0000008500)) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000008540)={0x0, 0x4}, &(0x7f0000008580)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000085c0)={r4, 0x7, 0x200, 0x1}, &(0x7f0000008600)=0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000000c0)='w\xed\x1d\xec\xec\xc4-\xdb', 0x8, 0x3) [ 894.813512] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 894.864752] device lo left promiscuous mode [ 894.896710] device tunl0 left promiscuous mode [ 894.933275] device gre0 left promiscuous mode 16:13:02 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x10}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0xfffffeab) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) socket$l2tp(0x18, 0x1, 0x1) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xf9', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 894.957264] device gretap0 left promiscuous mode [ 894.997011] device erspan0 left promiscuous mode [ 895.034397] device ip_vti0 left promiscuous mode [ 895.069463] device ip6_vti0 left promiscuous mode 16:13:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 895.109825] device sit0 left promiscuous mode [ 895.168116] device ip6tnl0 left promiscuous mode [ 895.184095] device ip6gre0 left promiscuous mode [ 895.244447] device syz_tun left promiscuous mode [ 895.306812] device ip6gretap0 left promiscuous mode 16:13:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 895.400614] device bridge0 left promiscuous mode [ 895.448058] device vcan0 left promiscuous mode [ 895.501621] device ÿ left promiscuous mode [ 895.547705] device bond_slave_0 left promiscuous mode [ 895.599544] device bond_slave_1 left promiscuous mode [ 895.648187] device team0 left promiscuous mode 16:13:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x97', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 895.686131] device team_slave_0 left promiscuous mode [ 895.728929] device team_slave_1 left promiscuous mode [ 895.778499] device dummy0 left promiscuous mode 16:13:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) getpid() dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 895.831343] device nlmon0 left promiscuous mode 16:13:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000880)={@remote}, 0x200008a0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000180), 0x4) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(r3) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') r4 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x5, 0x40) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000080), 0x4) userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 895.863378] device caif0 left promiscuous mode 16:13:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) write(r1, &(0x7f0000000040)='3', 0x1) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000002540)=0x3) dup2(r1, r0) 16:13:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 896.049102] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 896.069663] device lo entered promiscuous mode 16:13:03 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x6400000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 896.093495] device tunl0 entered promiscuous mode [ 896.105798] device gre0 entered promiscuous mode [ 896.127553] device gretap0 entered promiscuous mode [ 896.139727] device erspan0 entered promiscuous mode [ 896.174260] device ip_vti0 entered promiscuous mode [ 896.206740] device ip6_vti0 entered promiscuous mode [ 896.246145] device sit0 entered promiscuous mode 16:13:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) write(r1, &(0x7f0000000040)='3', 0x1) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000002540)=0x3) dup2(r1, r0) 16:13:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 896.268486] device ip6tnl0 entered promiscuous mode [ 896.297731] device ip6gre0 entered promiscuous mode [ 896.328382] device syz_tun entered promiscuous mode [ 896.359763] device ip6gretap0 entered promiscuous mode [ 896.403354] device bridge0 entered promiscuous mode 16:13:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2002102041fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000380)=[@window, @mss], 0x2037) write$P9_RSTATFS(r1, 0x0, 0x0) [ 896.432449] device vcan0 entered promiscuous mode [ 896.468490] device ÿ entered promiscuous mode 16:13:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x400) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 896.519153] device bond_slave_0 entered promiscuous mode [ 896.532153] device bond_slave_1 entered promiscuous mode [ 896.546274] device team0 entered promiscuous mode [ 896.574991] device team_slave_0 entered promiscuous mode [ 896.581029] device team_slave_1 entered promiscuous mode [ 896.597940] device dummy0 entered promiscuous mode 16:13:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000084}, 0x4000) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 896.649472] device nlmon0 entered promiscuous mode [ 896.660870] device caif0 entered promiscuous mode [ 896.681016] device batadv0 entered promiscuous mode [ 896.722781] device vxcan0 entered promiscuous mode [ 896.746514] device vxcan1 entered promiscuous mode [ 896.778506] device netdevsim4 entered promiscuous mode [ 896.795538] device veth0 entered promiscuous mode [ 896.810898] device veth1 entered promiscuous mode [ 896.848062] device veth0_to_bridge entered promiscuous mode 16:13:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x6, 0x20}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r4, 0xff}, &(0x7f00000001c0)=0x8) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:13:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(r0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x2, 0x20000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x100, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xa4, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'yam0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'yam0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa222}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43e3}]}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8ed2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x81}, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfatO', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 896.890316] device veth1_to_bridge entered promiscuous mode [ 896.917710] device veth0_to_bond entered promiscuous mode [ 896.949517] device veth1_to_bond entered promiscuous mode [ 896.990083] device veth0_to_team entered promiscuous mode [ 897.017778] device veth1_to_team entered promiscuous mode [ 897.048365] device veth0_to_hsr entered promiscuous mode [ 897.084525] device hsr_slave_0 entered promiscuous mode [ 897.108438] device veth1_to_hsr entered promiscuous mode [ 897.129416] device hsr_slave_1 entered promiscuous mode 16:13:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa00}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) uname(&(0x7f00000005c0)=""/4096) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:04 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x9000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xff', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000180)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="cf000000ef781befe317d0d872d8d9d097363f4e3dd79868e856852bde2b398f1aff01000000000000e356c1e6b267519e32ef5f154a27a8d9dc8d0558c6f81a9f8604316364de30f8fd8e006299e623cf90f535fe4cf2f56067aa0693d83a283e9f9a98dddf2e1cf20533b7eaf9d812caffd3b344a32539fc3e1e1d8ad98c8a3ec3cd3923fb179abf5cd79c3ac221c76c377e3c876df8d0c3248ad138748bd4383da44882fc6fa0e7efc7d9df269c8eecf4434d82da8d817cfb74d2dc500ad95ce7046b3cdb7e6f8e258909d92e84d35dc840"], &(0x7f0000000300)=0xd7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e23, 0x0, @mcast2, 0x8001}}, 0x0, 0x819, 0x4, 0x1f}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000001c0)=r4, 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:13:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x1) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) 16:13:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) r2 = geteuid() mount$9p_virtio(&(0x7f0000000040)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYBLOB=',dont_appraise,\x00']) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6c00}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x100000001, 0x400) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=0x0, &(0x7f0000000200)=0x4) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000240)={r4, 0x7, 0xe4, "e87f3f9dda0b85b7b9c5a013f743dd8a8be38637c1288313ba49ce90282f029c198c28aa0a362b5050f1f192631a95fc6a918c7f08ae0c1d0a74a18d6ddf0b5b5be530070d8d9562247c44383a71f8baa76cf6a53fa5bdb258b724b0b955416b784f4b4534129f7ba3a411eccb7047b3990158b7b99932e37d1a0e4e7e2e7669090ee015d3dcf3c4559330fec53fa7318fb2901090a5cfa1085c3b80ec5561e5727ed554609bc4cbd606e80fbda3ab78878272f547148ed328e78303a909edb9b882bfb2957cfdc9673f5a3b56998b39f33bbb040b64084f58c5b919ae99f4d92b3d7260"}, 0xec) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000340)=0x6, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r1}) getsockopt$inet_dccp_buf(r6, 0x21, 0x8e, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) semget(0x3, 0x0, 0x8) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x280000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 897.725952] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 897.742686] device lo left promiscuous mode [ 897.747278] device tunl0 left promiscuous mode [ 897.759187] device gre0 left promiscuous mode [ 897.777968] device gretap0 left promiscuous mode [ 897.801131] device erspan0 left promiscuous mode 16:13:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0)) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffffe00, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000180)="21239a7e12359716845e37ca2dd01686ad5fa9e20e098e62cc2c8260fbc052cdb07ca2ad74cae9ee3373540fae39d452ccf572a8eb1f93534f96a82964eed68c5aaadc9c823bfd13ab37c6f5b696f4be29465cd891b7f5cd05f9e3045ae48013730e4805c9928454134e0dd209c04ac7ec86f8d0053c2e0b451c709ad58229fe02ee57bf6c817e93142471948dad0f33f0c988688030de722c879d60a300da9347bd8dd19883442370ba331cfeb7959d8045c9257432f2c2d716a8d2cdbf397494ff86a972ea7dde32c24d3438ba2c28644f009c02362ff6c230d5efe99357ffbdc953a84ba927bb7621e5263a592988cfdd", 0xf2, 0x8001}, {&(0x7f0000000280)="e96df3abd94e24fa5bacba60811dfc29d9bf68137ca64092a37b5e3581fa6ddd766707dc9c3d66244af5054c6bed580f0898bde8d5e06bc5703d9dfaec8a4c007cb9b86fffa21de7643a4f392950ba2734a96c9ce3aa651f7d29ef1b086f061cf6fcc4248a204ec3a110cb29ee87ac65daa99a893dc6cbc66db582e8c5c08c9d59173dd3e9438f2a0abcd1ac76bede1dc8528f1b5ce27f08650debaff4fc1d3252aa618902f8455db967456f85a4bb3a2e7034a5aa345019c95285d8a609e23908715e535968564bb13532d59d3b5e981ac814d4", 0xd4, 0x6}, {&(0x7f0000000380)="f46a97eb440ce7cd372af1cb8e5bd858cfbb30b66b91f4f4f8604e", 0x1b, 0x100000001}], 0x100801, &(0x7f00000005c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@fat=@uid={'uid', 0x3d, r2}}], [{@measure='measure'}, {@pcr={'pcr', 0x3d, 0x1c}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x63, 0x38, 0x37, 0x31, 0x66, 0x34, 0x77], 0x2d, [0x7b, 0x64, 0x65, 0x37], 0x2d, [0x77, 0x66, 0x77, 0x37], 0x2d, [0x0, 0x77, 0x61, 0x65], 0x2d, [0x61, 0x62, 0x38, 0x62, 0x66, 0x35, 0x39, 0x62]}}}, {@hash='hash'}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 897.830102] device ip_vti0 left promiscuous mode [ 897.865115] device ip6_vti0 left promiscuous mode [ 897.874420] device sit0 left promiscuous mode [ 897.880948] device ip6tnl0 left promiscuous mode [ 897.892117] device ip6gre0 left promiscuous mode [ 897.910327] device syz_tun left promiscuous mode 16:13:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xff', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 897.925032] device ip6gretap0 left promiscuous mode [ 897.943170] device bridge0 left promiscuous mode 16:13:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) prctl$PR_GET_TIMERSLACK(0x1e) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 897.966610] device vcan0 left promiscuous mode [ 897.971442] device ÿ left promiscuous mode [ 897.989250] device team0 left promiscuous mode [ 898.002620] device dummy0 left promiscuous mode [ 898.012952] device nlmon0 left promiscuous mode [ 898.033086] device caif0 left promiscuous mode [ 898.045137] device batadv0 left promiscuous mode [ 898.058197] device vxcan0 left promiscuous mode 16:13:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x04', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 898.063718] device vxcan1 left promiscuous mode [ 898.068697] device netdevsim4 left promiscuous mode [ 898.075611] device veth0 left promiscuous mode [ 898.081060] device veth1 left promiscuous mode [ 898.087274] device veth0_to_bridge left promiscuous mode [ 898.110424] device veth1_to_bridge left promiscuous mode [ 898.128504] device veth0_to_bond left promiscuous mode [ 898.137561] device bond_slave_0 left promiscuous mode [ 898.143357] device veth1_to_bond left promiscuous mode [ 898.148882] device bond_slave_1 left promiscuous mode [ 898.154917] device veth0_to_team left promiscuous mode [ 898.161139] device team_slave_0 left promiscuous mode [ 898.167376] device veth1_to_team left promiscuous mode [ 898.185051] device team_slave_1 left promiscuous mode [ 898.193275] device veth0_to_hsr left promiscuous mode [ 898.198968] device hsr_slave_0 left promiscuous mode [ 898.212881] device veth1_to_hsr left promiscuous mode [ 898.229837] device hsr_slave_1 left promiscuous mode 16:13:05 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x4002, 0x0, 0x0) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x1f, 0x64001) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000aeeeb581002e2f66696c6530"], 0x10) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f00000001c0)={0x7, 0x8}) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'lo\x00', 0x200}) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:05 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x880, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000240)={0x101, 0x400, 0x7, 0xffff, 0x1a, 0x459, 0x4, 0x9, 0x4, 0x6, 0xfec, 0x9}) clone(0x100002102002000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x200, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x400, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x1, 0x40) splice(r5, &(0x7f0000000380), r6, &(0x7f0000000400), 0x40, 0x8) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000001c0)={r5, 0xfffffffffffffe01, 0x3, r6}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = dup2(r3, r0) bind$alg(r6, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x9) ioctl$RTC_SET_TIME(r7, 0x4024700a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40106614, &(0x7f0000000300)={0x0, @speck128}) ioctl$TCSBRK(r4, 0x5409, 0x0) ftruncate(r1, 0x400) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x6, 0x3) [ 898.636387] Unknown ioctl 43778 [ 899.433779] Unknown ioctl 43778 16:13:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 16:13:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xf4', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000440)={r0}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r4, 0x400, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0xffffffff, @bearer=@l2={'ib', 0x3a, 'dummy0\x00'}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x10) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) setsockopt$inet_dccp_int(r3, 0x21, 0x10, &(0x7f0000000280)=0x9, 0x4) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) r6 = getuid() ioctl$TUNSETOWNER(r5, 0x400454cc, r6) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) r7 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_security(0x11, r7, &(0x7f0000000340)=""/190, 0xbe) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:07 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x3}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:07 executing program 0: r0 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x80800) recvmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000180)=@nl=@unspec, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/133, 0x85}, {&(0x7f0000000400)=""/222, 0xde}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/9, 0x9}, {&(0x7f0000000500)=""/87, 0x57}], 0x5, &(0x7f0000000600)=""/255, 0xff}, 0x1000}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001780)=""/112, 0x70}, {&(0x7f0000001800)=""/136, 0x88}, {&(0x7f00000018c0)=""/166, 0xa6}, {&(0x7f0000001980)=""/96, 0x60}, {&(0x7f0000001a00)=""/109, 0x6d}], 0x5, &(0x7f0000001b00)=""/161, 0xa1}, 0xfff}, {{&(0x7f0000001bc0)=@ipx, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000300)=""/56, 0x38}, {&(0x7f0000001c40)=""/224, 0xe0}, {&(0x7f0000001d40)=""/136, 0x88}, {&(0x7f0000001e00)=""/236, 0xec}, {&(0x7f0000001f00)=""/80, 0x50}, {&(0x7f0000000380)=""/34, 0x22}], 0x6, &(0x7f0000000700)=""/36, 0x24}, 0x3}], 0x3, 0x40002061, &(0x7f00000020c0)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r3, r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:13:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80800) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 900.513425] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 900.561066] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:08 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRESHEX=r0, @ANYRES64=r1], 0xffffffffffffffb2) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 900.607236] audit: type=1326 audit(1546099987.938:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11100 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0 16:13:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat#', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:08 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000080)={0x8, 0xfffffffffffffbff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10c4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x614, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x8090) write$binfmt_elf64(r2, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x17d, 0x5, 0xfffffffffffffffa, 0x8001, 0x2, 0x3e, 0x7, 0x3e6, 0x40, 0x33d, 0x7, 0x0, 0x38, 0x2, 0x7, 0x7f, 0xffffffffffff8001}, [{0x3, 0x5, 0x1, 0x7, 0xfff, 0x4, 0x6, 0x3f}, {0x7, 0x8, 0x4, 0x7, 0x5, 0xf800000000000000, 0x5, 0x1}], "a3f76871baf777110f788b50323ae51b01118755a03d4b529bebe3a156ca5cf9c0ec6a430521e2e6b192c38c61f72a81642596de3654bee0494df591d03abbb2", [[], [], [], [], [], [], [], []]}, 0x8f0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0x15, 0x1, 0x7, "bd5412adf41ee9d84a816abf316de622"}, 0x15, 0x1) [ 900.736299] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffa888}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 900.868859] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 901.348948] audit: type=1326 audit(1546099988.678:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11100 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a81a code=0x0 16:13:08 executing program 5: 16:13:08 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x106, "c672845ac538067a94ed326fa2b00fc10570eef74112c1a093681ce6b55c7ebe", 0x2, 0x200, 0x4, 0x2, 0x400, 0x7, 0x7fffffff, 0x2, [0x1000, 0x4, 0xfffffffffffffffa, 0x6]}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:13:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="716134401d5ac7673cdd962ee46ae0b9e31ffdb4c0a0454104f7afe8138c46edfe226d5507ee7d2234fbc54ed4774e95421791de1201e9a9ef5ffa4b1449c6fe5ba106f1f042d7450ae2ee64aa", 0x4d) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) splice(r0, &(0x7f0000000080), r0, &(0x7f0000000180)=0x2c, 0x7ff, 0xa) 16:13:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffff000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xf6', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:08 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x40000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 901.435138] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0xa00, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x1, 0x30}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={r2, 0x9}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(r3) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x41, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x1) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x8b95, 0x8, 0x8, 0xfffffffffffffffd}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={r5, 0x31}, 0x8) 16:13:08 executing program 5: 16:13:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc3ffffff}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:08 executing program 0: clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r1, 0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='\x00', 0x1, 0x3) 16:13:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xf5', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:08 executing program 5: 16:13:09 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:13:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) r2 = socket(0x7, 0x800, 0x9) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={r3, 0xff}, &(0x7f00000001c0)=0x8) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 901.730368] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:09 executing program 5: 16:13:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfatt', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 901.797468] device lo entered promiscuous mode [ 901.820632] device tunl0 entered promiscuous mode [ 901.827458] device gre0 entered promiscuous mode [ 901.837951] device gretap0 entered promiscuous mode 16:13:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0x8) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x204802, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 901.890169] device erspan0 entered promiscuous mode [ 901.930425] device ip_vti0 entered promiscuous mode [ 901.943504] device ip6_vti0 entered promiscuous mode [ 901.973739] device sit0 entered promiscuous mode [ 902.030259] device ip6tnl0 entered promiscuous mode [ 902.065752] device ip6gre0 entered promiscuous mode [ 902.094219] device syz_tun entered promiscuous mode [ 902.125422] device ip6gretap0 entered promiscuous mode [ 902.146904] device bridge0 entered promiscuous mode [ 902.154697] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 902.162682] device vcan0 entered promiscuous mode [ 902.168349] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 902.175750] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 902.182992] device ÿ entered promiscuous mode [ 902.187762] device bond_slave_0 entered promiscuous mode [ 902.193868] device bond_slave_1 entered promiscuous mode [ 902.201028] 8021q: adding VLAN 0 to HW filter on device ÿ [ 902.208563] device team0 entered promiscuous mode [ 902.213944] device team_slave_0 entered promiscuous mode [ 902.219783] device team_slave_1 entered promiscuous mode [ 902.226841] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 902.233483] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.241278] device dummy0 entered promiscuous mode [ 902.249887] device nlmon0 entered promiscuous mode [ 902.301941] device caif0 entered promiscuous mode [ 902.306884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 16:13:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_pts(r1, 0x2000) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000200)={0xd4c7, 0x0, 0x6}) syz_open_dev$radio(&(0x7f00000014c0)='/dev/radio#\x00', 0x1, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x17060000, 0x0, 0x60}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x500, 0x0, 0x0, 0x0, 0x0, 0xa00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x4}, 0x8) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:09 executing program 5: 16:13:09 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x64000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7a}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="3a960eca58a641e2e800000000000000", 0x203) 16:13:09 executing program 5: 16:13:09 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0xa00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 902.537188] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 902.572292] device lo left promiscuous mode [ 902.581314] device tunl0 left promiscuous mode [ 902.604737] device gre0 left promiscuous mode [ 902.650632] device gretap0 left promiscuous mode 16:13:10 executing program 5: [ 902.691065] device erspan0 left promiscuous mode [ 902.717461] device ip_vti0 left promiscuous mode [ 902.745034] device ip6_vti0 left promiscuous mode 16:13:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(r0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xda, 0x800) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000080)={0x4, 0x4, 0x8, 0x0, 0x2a9f8171}) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f00000005c0)={0x1000, "927b79eb0b0da0692319d5fd6e878bce0a619c1040491ceef6265919d2849f772e95a06a2ee28fab9a0d782fc2ada1bbfb51505757b8b3ae927a5e6c3c69b433e7883191a9a79ab8d8dd49ebf5cc17f5b028f09a58da9f65e23aede525a46fa8d7b3f0f18cbcf45365d76b413ef779635045460aab0040837304350866bc3cec859af65c4405103a6e60dc6a16cf4704307169a5ba0c2d0eb986e48dcf848749e53d893629f0d82b4014d306339368656f0e7ab5e8885fd3bfad6986aca4879d18d8b7ce6f8340cb70c71367605177f34c72a49da60962cf411c3a1bb6bccad7240501098ea33eb20c7d228e09cc47246a44ddb2d502c66e1e10538e00f2bfbeada40c9592189dd4285dcf083be838ddfb1605b4766d1fedda8351efa97b5c532ed1e26c3773db0d884db04054841ad66f19b26822c9a96d061feadf1d8b4d982956e14d2fc23da9c88cc9f5b1bb6fe9bed471d1db0bdc366ba1510b27ee5f2afc7e51a7d833cedc150cad773988893d49e640cc8f46142a868ab72a7d4e259baffbb3dfedd677a39f59a1e2d40348acb988935c9cfb92f88ae4ed5645df6427282f53e744f31f449b67a08b7e6b72a690a1d208811b523bb30a3db5e1f937fa586f284a03445d58898e198b90712f3607047ef8b0573ff9d536f2f657fb613d321dbbc85e28efdd332ac8747b4f069f59d806fd6934a7dd8437ebb3a258befe9a91b63e5ac90b8992434c1d59f17203e18d4abcf49f45a4c4d08ff7dbc2e47b7ef793df32bbcb6f7e4d77286337c9ddc327ce17614f27b4ac44736cd5a70ae89eb47531651b81c911c9e1a5dc3939587050949147baee62e6228a0f3bdf4f016437c07ddf7c75ff4f409ebf92b3bd698c988f92f1f521c5026e257ffbd900b7d2e9516eaf1ff2ae37feba7ad71f0921edff530b98a0850a1efdc5dd4c89363035eb193c0437b36ad6d3cfe2225dd4144f19caacc2e359017f894dc62fed13495980925fc4756fb7121f4b7bac5a5d87409e7ad34b44c7d15cbf967f48cc5db5d0fd61c2fdc191ad5ab1a009c59f0091ae9cc275d58b37a96418b897f80299ebdde30f30ed425fe8f1573d1f470abd2e0d15479fc7b99dcb36fccaf9c2e18e8bdc995cb93f356bb56bd837ef4952b630ee23953ae8948b0d8bb8692de52d0fede3c5305cbaa0023332ced37d391dcb742d7c674b332c899fda6558e1979bf7e6fd7ce526aae58e16bfb52bc6f873bc4a186aeb36ebff694f83a030473bef07eb3b6f04c606cc03aa12b3ae7a0415b06fd185527338588cf8cd22ddd70525b73378cf4d83ced6494d96e7f37799bb72f404a6bdf548e06d1f0c27def7d08287d092a1c1a3e090bf6e0d2c00874eb92b5d309a4d22a6d89ff542ca49c9cad2f60d83f47e67aac2e7672afda26b829179163d645afebe90ba1c924708e5e829c628c102840669f4d0d31004a337026ba92a8cafeb904c3f7d13f22e0d1f197e05159d355f4be32512265950885a6af11796905b920d117e2f40eb5ece8febaa90e84da9ecf363d872be38542ce47debcc68c6e9c29a90627d866b1e8276d5f81b6606e3bbc1153fb51ce32682b2d20a9fd9744738dac6ef8a53e64fac0789dcef3b42ab491ef2b66ee89dfac9937f04cdca12098666162d80afef851f84210efe4f2347b6b88fb9229ec2afc8b9103f7d28830c60953dbc382f7021f72e56e8bcd72cc5239d71bde0bd5faae771ab8eec13682134b2980255c2dc33acfc614e71fe468109fd429887d7f3fd4421e8d4f4e40cd7ff170730cc0665f0dbeef5b8c1ae0156a15f3572fa91ef61292b43bc3d16428bae46e9c3f64f5c5ecad32416b402ab1f0faf05bcf790333eaaba7a770646b41709aa8fabf66fe5f0d0d026c8a6e894f11e90cfa32c89f28c67932eeb3c3e84101fc17f9a81d6d7f0eb25e716d6aa4cd51ab0ddf04b6edea93dc9819226297b4e82827bb20bec18ad20459361957b73d001780f32a5f62b1e3ef55a3f0dde5ed7e532b37dc4faa00628aec08ff1b08f436641061861b37dc20259a1ed822bcb8a93eae41859fc031b905f5508267ba469320b7accd2f8e59be7efa21332d54118fb0e9cda0d635e8ff22361b27927836de83a7f9bac68758badb01211bd428399f54156ce9155f9d1d44a46a0076cb3595acded517d63ee586875a967adc655be4be93fa39106b8ce58faadca8dd0b7032e8ed6a931047c5de6198c5073e49cf842b588a4b23a5a7c07758c70848a3a327eb46d7713216c875c5362a0dee44deef0dc2089bfbed0fa724fbdf414fe41081689b64f6d92db7a27ee9090416359376567f05b033d9decc8574886a8c45edb9966a88dd9643da1078b36abf826d705de12f63e739154f9ad2aa0ea275a884aca480a253cfc4fcdeaa5998df7b79a52def6a3849fccd1ff39d851bd54890f864ca8299a343d2386cd636af4e29bc2dd43f9fb051fb94791a370cb914e74808b36eec50bc3aa5e272371272e7d8c3109d3ff68004b9bed9510cfbe1061e18a3a5184fb786c5304c18ae589c4c88b7814ee98892681ed84e586be5d663fd98c795bbca72060f1b1a03f04889adef6f2ecb5c7902c6b0e38285a4867fe4fba65a5f6844d107ca5379e9def4a81559162394a86e43a7d78114876510b234ee03aee4d254e1a1aae20f926b50bfb0b5689ef4f004cad9fcaf1a64e4c044593ec8368e76b23e8eb367c48a642ce4fcd5cdb688628129efcbe550d722e53dd938c17f595adb523c8651dbb8ddb16dc29ac6ba80c49e38bfc13ed3bf2d2bc7037448db502bbe7eef37e750ec9ba6a78e6cfd79209c75b35874dea43cb60c50070556cc355532ba0fb4ad78687fdafd870ad4c66bde96b890663b086d6e40019df0dcf974ada18c9b3c85ef0eeb1bd413c2c6c1d24369c5475706e9521dfeeb03f6df4ab2069645c1e66896cd428d2903b80f18788f897b484be81a3c3a1b601c16263db2634633d95e099e6d86c5a2541d2535be74c53de6575770ce8e49051ed08ebbd0737d7619d6bd079bd20b9b9eaa39e86d78dc8df21d37d79f4d48099ccc35ab87e26a97db11b27d7bfda9d782930e5c61e7010d52245b383be33b353da078f5a1cf39f25bf6946b260d4ce31c2e07b07d1b53675e298608f0a4bd02adb6ab58131c399501dd78d15298362fdd4917bf21cf316eb2c916a3e661241133c45ab70f9b155349ac4eff2ce020bbd26475a4ad64c929f314f4484b027e7d733f9f816aec70fa78655319b2b6f71f8d17960ad8eee5eb89684c897c8406f11cb4bb3b9c54ed0d19198f63cf88bd4d04b014b37a51b6e831565f72cdda0ba2105bc0c28764d035b5ee3e5a415ebcf348df26b37db8e34aed88375a9b5977dbb07cb0da4dfe2c5c0326a3701f172a859dd651cda55905d584f215057381b86f892761cfa437eae28d0d273bd7d7c6e5f90beaf10800f52158ce943811f27d9ec328fd5db4a6b808c7b59e4517308b408e43d41d9e0012d1d9ed1b2bd046cf81d11fccfc82d20d05123029286441646db81645a04827e70381a0e7edb622ec8f6ea57fa625d3fdb0222a8d9108035620e7018ad31990b5051f3efd2612021e09f493d3df0f78c705a044f0ad25fc70410849ea1056091530cbb7490246de8e0a93c5e2e636975dd51360c93925133b856e1a2ddbc802183581f7cdbc29cbd8b4525b7c5a18ad0bc6aceecec7f298c792bcf5122c912e1d70abe0f69bb881504ae415d8ab611f358e8773773645b73d9b9e774e832da7c363a30a0ff59e1e022e7c6d1113c43baed7cbfd88d257f0bacc27984fea4f2db3332e75176375e347e2fc1f49ad644e34ce8f626cf1cee794d1abf85eabd289e49e602f266cd36035aa111d0fa4811b862ca886e4b6fddbd25e2c0b083a756f6fff125a07c865ac5b0129edc1dd82a2cfc225442e63eb6ffa6f226cf1d18d36d14fd48d62c984333883d16ff72ca2439310fbb3aa23335ef53a280c4450fa52e0152f265df151d30f1df7a3920d3c8fae271e34889baa7d0e5b43bb8514a5680610ae2a14af9a59347f49c8c13d76ed6551d1d0e6eaac4a87ab18d80019cee1c70eeb913709da61064ad24c768d09121895e5ff0aa952bfa0ed628a10b18a56fabee6c40ce3ca4cb85a4049a2dae81ab4ec8d327ddf8e4b5b06ee91109b658b23e02e2b7056ac53a2cb17e85ac74f2f6369215ccf68b222d680b222c2b76647992256b6cd085b46b3454e5cc29ca9fed5e7b5039f3583fde5c37072daa50d96f11b2ecd9c6848b63b5b859ddabc726051fd0c4995df902c92440d14eec9de77d41880b97c406668fecd881fcaa688453fa8f572c279fa0f83c6d7a57d953cb5257cfe06df7a69f2d0c659f4f8d732f7580245584ec242b630b7344d43ea3513933fd806224ebe970c6d00c351baf8a318283b3bcb2ca2e08a1b70d4abdade3be27480def708fcca548c4efca70f9285e77743dc4e5d064ab21e84cc5cdc962e42d45d2f014187d0ba34b355704758e82c1e2fbffd3206f5c226647e257adcf05036d44afe97ab66ffad625afb39387141c0ceece362ff73e65fb03a04ebf56c901f5a27f887ea127dcaa69ade33c69bd610a5cded02bf98d241cc8ceff0346d6288f1c5092d53862c52308186aee0bc6ebd08b7afe468f37262f3d58829ea2593706223ad0bc2d80f9e5346c243181346537aedbb4b37fb3aaab5e6bb9d307ce39fc82bdf95da3fa994d3d759fea0b2e1cdf3e2cddd463c510cd1622f6e4692f67a5c5d10b47e9db75aa4f62ad68cf4d5b874066a0dbeb8f62ed9f294eee1c9e2fca59df54f6feb745b7b77f14e2e714cee383af22a57e1f47c88835d9162729b069da1cd90200568b9c226c9896c44556118d5baabce863c0de0486a25bf5ef8ca38345f979b3b651bef35ab9c6832522207cb359ae2231218756274ba1b0f702d61f5f6cdd405ceb8ac36c71e0e0e02860e54c14b378affe054c74c688ac15acce4b2a1b74f77e3228b7f57c80af949efbb7fa49778ae8d0af3511cec3a049c9cd8790e5c380bce9a4b4eacd7495d8ec4dd318c6f3ea968c1c125fe288aa1459d1a47e60681eb4088f78873558c0664a8a357615393c0032a17be8c679591de109b904b06938197e6aabc1e91ce988002c3e23ca0e100d1b47f83b0095e611d5671f046c066bd768e3e94a92d241162e87f7817ff4ee3a25c00f90d3e0343ee4af517a55c2d38a84e61816a8088ba74e05eec74005660ccad0706010e9cff742d674b247942caf33cc141f352c8d7873405f35102781546e5e08b1089c85ab6e3010ec4225546af51051c72073ff286c409a0530d0896144374f9135d4c50e25fa51f96592bf1cfb335d50e9540a6df7a7cd1e4b8bd119e5790b0ea34c85b202e3aaa174ffe785bff55ee8a555d7bd56b89cbebfdd02e6b8ec4503a9243e96ce8ecd5b96671ac740f6c9f59c4b460c1eb6b074aa5af642d0d15e778b7c2fe8f567dbc84b4e9b01233bb9e6d6d14044ed6c83b74b3fa05f48bbc22d5f8c76218e22670fe0f88e09f350b31c6c81c94c498442d4b7ecba1582c64fa31d99a17b13b045f1de22ef87886336af7adf0f511e23db2f4fb987e4589a090ffa1138f34c14d6f90e2ae1dbb719321ec9e0362b7f833d148e33248e9cd3f6630d52cbbc42cc1fb42b0fdfc70c25de1d93efb1538ff1e03392c0459b337e462bdd479db091465d7407302714fd66a4e827fa191b20b356fcb54df680faffbaffacdf4497117bedc797fe4223d7d8d4c4"}) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000180), 0x4) shmctl$IPC_STAT(0x0, 0x2, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000001c0)=0x5, 0x4) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x2, 0x4) userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 902.769238] device sit0 left promiscuous mode 16:13:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x0e', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 902.804528] device ip6tnl0 left promiscuous mode 16:13:10 executing program 5: [ 902.852755] device ip6gre0 left promiscuous mode 16:13:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x82400, 0x0) connect$netlink(r2, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 902.906526] device syz_tun left promiscuous mode [ 902.926532] device ip6gretap0 left promiscuous mode [ 902.939102] device bridge0 left promiscuous mode [ 902.949185] device vcan0 left promiscuous mode [ 902.960557] device ÿ left promiscuous mode [ 902.965471] device bond_slave_0 left promiscuous mode [ 902.971143] device bond_slave_1 left promiscuous mode [ 902.996164] device team0 left promiscuous mode [ 903.013529] device team_slave_0 left promiscuous mode [ 903.027537] device team_slave_1 left promiscuous mode [ 903.053617] device dummy0 left promiscuous mode [ 903.118820] device nlmon0 left promiscuous mode [ 903.125695] device caif0 left promiscuous mode 16:13:10 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x3f000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:10 executing program 5: 16:13:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x396) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) fcntl$addseals(r0, 0x409, 0x4) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x04', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5865}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x6, 0x80) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000080)=0x78) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 903.488448] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:10 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x20, 0x7, [0x9, 0x1, 0x2, 0x2, 0xfffffffffffffe8f, 0x78d2, 0x1]}, &(0x7f0000000180)=0x16) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23}}, 0x7f, 0x8}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000000c0)=r3, 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:13:10 executing program 5: [ 903.653376] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 16:13:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 903.694756] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 903.712312] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:13:11 executing program 5: [ 903.735948] 8021q: adding VLAN 0 to HW filter on device ÿ [ 903.751479] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 903.765743] 8021q: adding VLAN 0 to HW filter on device team0 16:13:11 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000180)=""/70, 0x46, 0x2000, &(0x7f0000000200)=@in6={0xa, 0x4e24, 0x80, @dev={0xfe, 0x80, [], 0xd}, 0x1ff}, 0x80) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) ioctl$TIOCSCTTY(r3, 0x540e, 0xffff) dup2(r0, r2) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 903.943068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 16:13:11 executing program 5: 16:13:11 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x6400}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x0e', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:11 executing program 5: 16:13:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x200800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(r0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x4800) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) shmctl$IPC_STAT(0x0, 0x2, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f00000001c0)={0x1, 0x6, 0xfffffffffffffe01, 0x9f, 0x8, 0xb6}) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') getsockopt$inet_tcp_int(r2, 0x6, 0x2e, &(0x7f0000000080), &(0x7f0000000180)=0x4) userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:11 executing program 5: [ 904.476702] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 904.548000] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:13:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xfd', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:12 executing program 5: 16:13:12 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001b00)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000001c00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001c40)={'bond_slave_0\x00', r3}) r4 = dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xd2f) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000000c0)) [ 904.772539] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:12 executing program 5: 16:13:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 905.194275] device bridge_slave_1 left promiscuous mode [ 905.200067] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.295275] device bridge_slave_0 left promiscuous mode [ 905.313030] bridge0: port 1(bridge_slave_0) entered disabled state 16:13:12 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x6e010000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:12 executing program 5: 16:13:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 905.474406] team0 (unregistering): Port device team_slave_1 removed [ 905.533790] team0 (unregistering): Port device team_slave_0 removed [ 905.560403] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 905.621620] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 905.863910] bond0 (unregistering): Released all slaves [ 905.959025] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 906.131533] IPVS: ftp: loaded support on port[0] = 21 [ 907.120481] chnl_net:caif_netlink_parms(): no params data found [ 907.477264] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.483780] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.491299] device bridge_slave_0 entered promiscuous mode [ 907.536990] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.544008] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.551465] device bridge_slave_1 entered promiscuous mode [ 907.674132] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 907.723677] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 907.830841] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 907.838784] team0: Port device team_slave_0 added [ 907.870256] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 907.877957] team0: Port device team_slave_1 added [ 907.908163] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 907.941025] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 908.060803] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 908.095515] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 908.399774] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 909.497814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.603061] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 909.706524] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 909.712857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 909.720253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 909.822696] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 909.828784] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.933388] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 909.940386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 909.949019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 909.956941] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.963350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.970550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 910.067226] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 910.074454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 910.083828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 910.091558] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.097990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.192272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 910.199147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 910.306483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 910.313559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 910.424056] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 910.430879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 910.440973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 910.449171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 910.551024] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 910.558076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 910.569568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 910.670298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 910.677335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 910.685294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 910.789626] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 910.797665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 910.807068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 911.413499] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 911.655411] 8021q: adding VLAN 0 to HW filter on device batadv0 16:13:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) listen(r0, 0x4fc) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x400, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x7fff, 0x5, 0x3, 0x6, 0x0, 0x1f, 0x0, 0x2, 0x8, 0x9, 0x7, 0x1f, 0x7e4, 0x81, 0x5, 0x5, 0x1, 0x23acf1fb, 0x4fff, 0x8, 0x401, 0x8, 0x2, 0x200000006, 0x1ff, 0x2, 0x10001, 0x0, 0x7, 0xff, 0xfac, 0x8, 0x9315, 0x7fff, 0x1, 0x1fc00000, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x80, 0x400, 0x9, 0x0, 0xf601, 0x7}, r4, 0x3, r2, 0x2) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0xfffffffffffffdfa) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x6, 0x7}) 16:13:19 executing program 5: 16:13:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xfe', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:19 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) write$P9_RWRITE(r3, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0xef4}, 0xb) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:13:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc3ffffff00000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:19 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x6e01}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 912.095980] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:19 executing program 5: 16:13:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x700}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:19 executing program 5: [ 912.328878] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 912.352490] device lo entered promiscuous mode 16:13:19 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = dup2(r2, r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000140)) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x8000, 0x200}, &(0x7f0000000240)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000280)={r4, 0x8, 0x4c, "2f4a204945f676d6a9d41c373b602b7cb37eff5c40e7a2f1fd4fbc2169d5638c0f61742329eeb2637b77631c818e028a4f4d92022fc32e2ce27c0d13bdf4a96e7e56645cb39bcaceb57da3b3"}, 0x54) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 912.393681] device tunl0 entered promiscuous mode [ 912.405286] device gre0 entered promiscuous mode 16:13:19 executing program 5: [ 912.482209] device gretap0 entered promiscuous mode [ 912.509559] device erspan0 entered promiscuous mode [ 912.515025] device ip_vti0 entered promiscuous mode [ 912.527489] device ip6_vti0 entered promiscuous mode [ 912.538138] device sit0 entered promiscuous mode [ 912.548254] device ip6tnl0 entered promiscuous mode [ 912.555809] device ip6gre0 entered promiscuous mode [ 912.564256] device syz_tun entered promiscuous mode [ 912.610682] device ip6gretap0 entered promiscuous mode [ 912.667663] device bridge0 entered promiscuous mode [ 912.731243] device vcan0 entered promiscuous mode [ 912.754521] device ÿ entered promiscuous mode [ 912.789412] device bond_slave_0 entered promiscuous mode [ 912.811335] device bond_slave_1 entered promiscuous mode 16:13:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8080, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000040)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x2000, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) fsetxattr$security_smack_transmute(r2, &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x1) 16:13:20 executing program 5: 16:13:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:20 executing program 0: [ 912.842855] device team0 entered promiscuous mode [ 912.847800] device team_slave_0 entered promiscuous mode [ 912.853910] device team_slave_1 entered promiscuous mode [ 912.882384] device dummy0 entered promiscuous mode [ 912.895804] device nlmon0 entered promiscuous mode [ 912.910117] device caif0 entered promiscuous mode [ 912.937175] device batadv0 entered promiscuous mode [ 912.953773] device vxcan0 entered promiscuous mode 16:13:20 executing program 5: [ 912.978382] device vxcan1 entered promiscuous mode [ 913.005942] device netdevsim4 entered promiscuous mode [ 913.033041] device veth0 entered promiscuous mode [ 913.038019] device veth1 entered promiscuous mode 16:13:20 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) [ 913.108834] device veth0_to_bridge entered promiscuous mode [ 913.128933] device veth1_to_bridge entered promiscuous mode [ 913.158355] device veth0_to_bond entered promiscuous mode [ 913.192550] device veth1_to_bond entered promiscuous mode [ 913.212546] device veth0_to_team entered promiscuous mode [ 913.228867] device veth1_to_team entered promiscuous mode 16:13:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xff', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000080)='syz0\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 16:13:20 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 913.242186] device veth0_to_hsr entered promiscuous mode [ 913.247858] device hsr_slave_0 entered promiscuous mode [ 913.256643] device veth1_to_hsr entered promiscuous mode [ 913.269481] device hsr_slave_1 entered promiscuous mode [ 913.378460] input: syz1 as /devices/virtual/input/input11 [ 913.436463] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 913.480963] input: syz1 as /devices/virtual/input/input12 [ 913.509312] device lo left promiscuous mode [ 913.539388] device tunl0 left promiscuous mode [ 913.553263] device gre0 left promiscuous mode [ 913.557976] device gretap0 left promiscuous mode [ 913.656564] device erspan0 left promiscuous mode [ 913.709017] device ip_vti0 left promiscuous mode [ 913.731480] device ip6_vti0 left promiscuous mode [ 913.739629] device sit0 left promiscuous mode [ 913.749465] device ip6tnl0 left promiscuous mode 16:13:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000080)) userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x0, 0xfffffffc) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(r1) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480), 0x111}}, 0x20) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f00000001c0)="153520ae1e3b8f747ac285572a549ffe3c9f09fc8a2cc8abbab655c8953df46ff4eef00fced831ca9af9c813fd8c5e1674d6dc1d7cbdf94ca72af65e94c804c3109115070b9ca4767aeae60fe2fe3fb715dfdec6fa9afc7e3170876cbdcff42ea24eadcd8ff1e7bc3538a913dff6af14a6c65aa12a1346c9b6b7b129290552ed982d3c83a847a8fcaaf4", 0x8a, 0xfffffffffffffffc) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, r4, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 913.786242] device ip6gre0 left promiscuous mode 16:13:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x1fffffffffffff, 0xfffffffc) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(r1) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480)}}, 0x20) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f00000001c0)="153520ae1e3b8f747ac285572a549ffe3c9f09fc8a2cc8abbab655c8953df46ff4eef00fced831ca9af9c813fd8c5e1674d6dc1d7cbdf94ca72af65e94c804c3109115070b9ca4767aeae60fe2fe3fb715dfdec6fa9afc7e3170876cbdcff42ea24eadcd8ff1e7bc3538a913dff6af14a6c65aa12a1346c9b6b7b129290552ed982d3c83a847a8fcaaf4", 0x8a, 0xfffffffffffffffc) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 913.839468] device syz_tun left promiscuous mode [ 913.888156] device ip6gretap0 left promiscuous mode [ 913.912035] device bridge0 left promiscuous mode [ 913.928654] device vcan0 left promiscuous mode 16:13:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) listen(r0, 0x4fc) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x400, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x7fff, 0x5, 0x3, 0x6, 0x0, 0x1f, 0x0, 0x2, 0x8, 0x9, 0x7, 0x1f, 0x7e4, 0x81, 0x5, 0x5, 0x1, 0x23acf1fb, 0x4fff, 0x8, 0x401, 0x8, 0x2, 0x200000006, 0x1ff, 0x2, 0x10001, 0x0, 0x7, 0xff, 0xfac, 0x8, 0x9315, 0x7fff, 0x1, 0x1fc00000, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x80, 0x400, 0x9, 0x0, 0xf601, 0x7}, r4, 0x3, r2, 0x2) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0xfffffffffffffdfa) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x6, 0x7}) [ 913.955911] device ÿ left promiscuous mode [ 913.960764] device team0 left promiscuous mode [ 914.003246] device dummy0 left promiscuous mode [ 914.024672] device nlmon0 left promiscuous mode [ 914.029611] device caif0 left promiscuous mode [ 914.059635] device batadv0 left promiscuous mode [ 914.079690] device vxcan0 left promiscuous mode [ 914.094225] device vxcan1 left promiscuous mode [ 914.110862] device netdevsim4 left promiscuous mode [ 914.133654] device veth0 left promiscuous mode [ 914.145545] device veth1 left promiscuous mode [ 914.151187] device veth0_to_bridge left promiscuous mode [ 914.159137] device veth1_to_bridge left promiscuous mode [ 914.165289] device veth0_to_bond left promiscuous mode [ 914.171155] device bond_slave_0 left promiscuous mode [ 914.177226] device veth1_to_bond left promiscuous mode 16:13:21 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x16e}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 914.183415] device bond_slave_1 left promiscuous mode [ 914.189203] device veth0_to_team left promiscuous mode [ 914.207967] device team_slave_0 left promiscuous mode [ 914.220673] device veth1_to_team left promiscuous mode [ 914.243571] device team_slave_1 left promiscuous mode [ 914.286830] device veth0_to_hsr left promiscuous mode [ 914.317227] device hsr_slave_0 left promiscuous mode [ 914.348971] device veth1_to_hsr left promiscuous mode 16:13:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xfa', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 914.375816] device hsr_slave_1 left promiscuous mode 16:13:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x0, 0x2) syz_open_procfs(0x0, &(0x7f00000004c0)='net/stat\x00') r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500)='/dev/zero\x00', 0x105002, 0x0) bind$pptp(r3, 0x0, 0x36e) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80040, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x168, 0x0, 0x1, 0x8, 0x6, {0x0, @in6={{0xa, 0x4e21, 0x7ff, @empty, 0x4}}, 0x4, 0x3, 0x200, 0x2, 0x9}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000240)={r5, 0x2, 0x7, 0x6, 0x4, 0x9}, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000002c0)={0x1, 0xc4, "fffe596698283a2846bba3080145639053f8de89ae899d4eddcb4e2a80afa77b0b2add793aabfc345a3c12834eede1e6f73a2789b62594dfa85c394db92565ef5f61922d1bde1fc0713f21b074c848b6bbfdbd2a82a323a850a441948dd8e4ed9be59a8f2d7de3598c71e831512dc3600ff799feeb32cf8ab1c3058c20176fff18c71288e49d2a7738fe589d0ac1baf4cb8ff480a709e31598abe6736e96420d8f63d50ef415ac0a35f9930ffabdffc1ce1648f3f2d15341bda2e1903cff1e3681d68f4d"}) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:21 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000080)) userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 914.605430] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6800000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 914.860962] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x04', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:22 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 915.171256] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:22 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x100000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x200000, 0x0) bind$unix(r3, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040), 0x0) close(0xffffffffffffffff) fsetxattr$security_ima(r2, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0403ede539f53b0a34b124aa22"], 0xd, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x2, 0x3000, 0x40000000200, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) r4 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x8, 0x325000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x7, @remote, 0x7f}}, 0x3ff, 0xff, 0x0, 0x8000}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000300)={r5, @in6={{0xa, 0x4e20, 0x5, @mcast1, 0xb9}}, 0x69, 0x2}, 0x90) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:22 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x200800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(r0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x4800) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) shmctl$IPC_STAT(0x0, 0x2, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f00000001c0)={0x1, 0x6, 0xfffffffffffffe01, 0x9f, 0x8, 0xb6}) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') getsockopt$inet_tcp_int(r2, 0x6, 0x2e, &(0x7f0000000080), &(0x7f0000000180)=0x4) userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:22 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 915.427427] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd201000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:23 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 915.827932] netlink: 'syz-executor5': attribute type 16 has an invalid length. [ 915.969685] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 916.015666] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 916.120848] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 916.143779] device lo entered promiscuous mode [ 916.181700] device tunl0 entered promiscuous mode [ 916.188657] device gre0 entered promiscuous mode [ 916.196717] device gretap0 entered promiscuous mode [ 916.210658] device erspan0 entered promiscuous mode [ 916.240009] device ip_vti0 entered promiscuous mode [ 916.268145] device ip6_vti0 entered promiscuous mode [ 916.288143] device sit0 entered promiscuous mode [ 916.306978] device ip6tnl0 entered promiscuous mode [ 916.314828] device ip6gre0 entered promiscuous mode [ 916.321668] device syz_tun entered promiscuous mode [ 916.329562] device ip6gretap0 entered promiscuous mode [ 916.345794] device bridge0 entered promiscuous mode [ 916.354275] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 916.362002] device vcan0 entered promiscuous mode [ 916.367365] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 916.375374] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 916.383827] device ÿ entered promiscuous mode [ 916.389027] device bond_slave_0 entered promiscuous mode [ 916.395813] device bond_slave_1 entered promiscuous mode [ 916.403908] 8021q: adding VLAN 0 to HW filter on device ÿ [ 916.410680] device team0 entered promiscuous mode 16:13:23 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x8000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:23 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:23 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:13:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000001c0)={0xa30000, 0x6, 0x9, [], &(0x7f0000000180)={0xa2093e, 0xba, [], @p_u32=&(0x7f0000000080)=0xc0000000000}}) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') r3 = userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) fcntl$setpipe(r3, 0x407, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 916.415686] device team_slave_0 entered promiscuous mode [ 916.421309] device team_slave_1 entered promiscuous mode [ 916.427775] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 916.433899] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.458646] device dummy0 entered promiscuous mode [ 916.506182] device nlmon0 entered promiscuous mode [ 916.546391] device caif0 entered promiscuous mode 16:13:23 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 916.581965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 16:13:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffa888}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 916.670519] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:24 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 916.766936] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 916.818972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 16:13:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6558}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 917.132721] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.139480] bridge0: port 1(bridge_slave_0) entered disabled state 16:13:24 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 917.518800] validate_nla: 1 callbacks suppressed [ 917.518813] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:24 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x1000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:24 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x40) sendmmsg$nfc_llcp(r2, &(0x7f0000004840)=[{&(0x7f0000000180)={0x27, 0x1, 0x2, 0x1, 0x4ca3ef1, 0x3f, "14ee7342dd6df34a2a67105dba553fb7d206b15616a41d6ef205828bee8539875ebe21b7d4b253052099207114068d873bd12a8bcaaf8471efde865b52f3d7", 0x22}, 0x60, &(0x7f0000000280)=[{&(0x7f0000000080)}, {&(0x7f0000000200)="aec2479bb4c08d30f9c1370cb9e833a63954523cea923c45", 0x18}, {&(0x7f0000000240)="29fba95645d3d2d11210afcda2383a9e27e98003fab15727fee76eaf45f1af783bd0b127d08e7ffc6511c04b0aca5ca3f4e6025142", 0x35}], 0x3, &(0x7f00000002c0)={0x20, 0x18f, 0x8001, "2fe464207d1668d93230817e6e"}, 0x20, 0x1}, {&(0x7f0000000300)={0x27, 0x1, 0x0, 0x6, 0x8001, 0x4, "1437fd48614f7b1eb5530f2793da24a67a9fc902b05aba235e565d5f62686a300845dbc2a20381bd04b94cdbfd40488323f0505eae306ce1388d92db146136", 0x1c}, 0x60, &(0x7f0000000740)=[{&(0x7f0000000380)="c89cd8eeb109df5f92e364e8187715982a7f902e39c9410af12dd3e4611b30d0bc7eb68df9b626dfb0bfb97cc98bf526ef818114d6aa1cda988f39388fc1cc06495885bef8644f5db8f601190da7613605f6cd1b55f42bb660b740ce259644bf971153428901a5fbaf92b4d0619aa326d2c9e3d2ca00ba34a42b2f3128a4ac9e5329349e9bd31207a6956f678c65eea9ede05888716ab4663fe8e39220baac60c97767", 0xa3}, {&(0x7f0000000440)="b3e748975fb49609490272e80a9ae97e0a924fb9f210d79f27e9464e4760cacfdc6b02c2f79ac22589ee64ccea036fff4ddb6ae59ee236229eb148653b32f925ded744b4f213aa4dc57ca50f5c789901de627fd551dd87934f97cc25e4b13255af70eaaa3f6c749f11de5169034e63d96a9b", 0x72}, {&(0x7f00000004c0)="e83a28a4162c2da9d668822e24036749b3177317ad4f614aa118e5073bcd240297eabdd61f8effde3c691661efe149e550dcad30be0bcbe3734332ebad1bd9add6cb61ad82cf2567e121e27b67878b420a7da907349e1e6da53560365cfe471f1a31", 0x62}, {&(0x7f00000005c0)="26de19fc818d4755e965b95f2ae9dcb9573c5ddad8f0264ff238d1b5cbd29b17a497369d", 0x24}, {&(0x7f0000000600)="c777efb585cb5b58d44a497a62916699b1cfb747a5a6468185d3230fdb29687b6fa40f04fddb34421bd0499f89f1dbafc48a85af31428502bfe78cd9", 0x3c}, {&(0x7f0000000640)="20cbf1d2bfd113b8a00db2851744e7bacedd3bfa8e54751ccc289742b5dd3b511222db139101b4126eaf2df82b6061468dadb84cf9ba8b2af32106e44328f5dd78349ec64c1d0b997f01758f95140671c70ae7a66acb711c2d64894da292253cd5589a7b556e78234a68fba26115ddff4812f96d2994508150f95be4b9957d23917e9180c2c64de1fad8026054a0ab63ed6d955b70a425ae7ac3b254ac665c5b40e71cb8c4e8a6262611a5a8f2f0a69d67e0e5229d4921f7ef2511ddfb553e274ddf46f452df5c2c09a10e72b28c9187fb9c7fb7", 0xd4}], 0x6, &(0x7f00000007c0)={0x78, 0x114, 0x6, "376149448387a93f496c544eb6f6dadce39d1f9bd3402da188d2964504e73a5d03e2565afaec3b97302ef09f3f144b849d3a5fb3d465df8bc01969841a6526b69aa217749bae255ebe1f3f10a2dc9e5b45e461dcce2468a1dbfcb5fd7558f62f3eb28f"}, 0x78, 0x4000}, {&(0x7f0000000840)={0x27, 0x1, 0x0, 0x7, 0xfffffffffffffff7, 0x58ee, "552eeb59dc02c7ba168ddf54946a8d6f33bd38da9d336160a2625e331c6ee7bea770f368fdeef1f72705ac36bd23da88f1d5de0f88183d5cc925fcf6c54c64", 0x22}, 0x60, &(0x7f0000000900)=[{&(0x7f00000008c0)="84e45c06088c4829cb727af751b5fbf0", 0x10}], 0x1, &(0x7f0000000940)={0x30, 0x117, 0x9, "4009afd9c77554d46f0def8328c2c23b842344b80f5244c1659a94609163"}, 0x30, 0x24040804}, {&(0x7f0000000980)={0x27, 0x1, 0x1, 0x5, 0x4, 0x2, "4f695a313ae49463b3ff7cf78d504b71cebc40556ce044f263207d0506d6b48870e1cb009ce3f7ccfe9dfe49d1df033d151ee22841e2d4ffe3c70ad087470e", 0x33}, 0x60, &(0x7f0000002b40)=[{&(0x7f0000000a00)="f5a94a07c284074d2e2f31e55f2f1529c3008ca6267a69bfed0def7077e70eb940b5dbf73a2880b7f366c726836687a68628fae71b5d6ebc1073966df36cb79bc03d2eeae46f973faa80a446a2e517c88f1b0121bd3189618dc8d2efe442577299c15c4f1a86b6525fc3fb474a11e0aa8ace6219a965e97bba17ff3be1b2391b16ff375c7b84de9966e7e9fee7f70dbbb9a01da581b019554c44dfd071133b26585915cf041ea8229e546206a35306cef81de777629ac9e10a0ce517d456463a626ef88a5de36a0c44764155d57a013f03e02eef9990f556657f9ed93492a95afa59e9a3f6505cb00e6d886f793cd1e6d85c4db4355d380259795970d3743ff7128e6dc2a7c27f1bb8997d544a3b19b3a5ac43ec1f371fb6738cee502570d1f2c71e45710702498e288ee9eb26755c67af70f48d87a9d96673d47bdf7e71576f59ad6bb3ca359a173f501ee2345a1d782afa2277f7a4485154c3b73c1916cbdc03231fa177eb1ce23e90908d067222ac06044ecb82d8bf91f093255beaac6f14c7f9b521c119595179a809f662e75e6fd839dabf4e5063ee217f2545c80df403800505b5b38dcf6905f1c12685829720825e61a2182eea1b9c95a618029348570d8048bce01b8d93ff4b1694f09ccc9a0ed17be70d86a62c48c899860ee4cc4601687ac24f2af3940e0fdf0b6c67fa5cd2627e222a7ba58f1c24ebca984cdfb0a602dfa189c488e8ba67aca1445a4a1c67a24ed274f62bd94cf37e11b8fd3b95aa32fc8f5eedf35f0bdf6c324289904ff7cef5faf978e3148ec471e0b824135bb1814ff7cb9cc8bb8eb5b74fdf61386140e1f57a5e810ea8d57b30d5e082d912217502e4fbfef1768086a8176c2f408edd90ca451ce0aa09f02d010874152b6262e1fc89f4028fb2f7b7baa8c27152f63dc1e0d17e2fd66ac51015fc6319821fac0724bf2ee5900d6fc5c5c82be0d5831f8227c2e63cef5d32d7e1a568ddf431e2dead7c28cf814adf97ddf029e23ed3256f99f122ca9748abff87f84629b8e299462ef66cec1f0d1432c7807d1b9f86e61f0efc7369803fd9eedf511ea88d53b6e8328241d39d44e47e2b8e1d9f1bd7cd8d7a423b53a593f49f7e81f88a95ad8b5f2dacb6de036f4f8e48538bb93d3f76d822961f544358dea9b8a0c5ece38ba9e072eb4b5529f2821734eb1d890aebb7fe358554039f2234e7258ac41f594befaea39c3cdd9dc74252cf7a11f9357ebe6561211b1ab565026fd6ce873d2107ad2301d248656ed297d919277ed17ddbd2566f8332cd6903877397381a19e0aca4a875ab07194716bae3f24a578192ad19cf7e1b637737e4d12701dfdff6bcd8a73e239ead031f2dedc365e8188a89fa3631aa3055e76071dd04f3c89d99f705ccdb905b0a7b1b11f0b5f5e9dfa599911c74067d47cfdb408c3978908d711f208bebd4c18a42d286319a1464d3b6c810b1188b4bb12bee39da8a972d2266f7285715495b5ec9e6a5de0b346e1dc424a47f06473a325c0b4b38e814563758003ea8f19b72c013e95267beb52508c048b6ee27039c66f0e545166de1cd38fd39b0ee97a0bf49ddeb5989e18969e40e3cc1ed3e80189367b7e9bac16487784c8fdfb1bbf4c00e0e79c0446fa11957188d18d6a21efb4a2b7afd9709bad14c912d2e5c214d3a20fb89f8b83ec3769a537a218d9923d32c15c11c91ebb8d2cc3093b4221cb3791a55edb86a793e6d0e1f849a687183407f570c0f5befcbdafe43edebdc32ba9f33e59a582998acb539f09034c6adad0e8be1e5e02106b1590362c4459840333562d7dd4a055202a37062f53ea2b3adbbfd79a0045e13407d42c8e8aaef5f94b41a3275ced1b87ac11060391d97f1076b25f51192a565037b98d5a7beeaaefdb32751691f7e00699172d7dfe65eb6ee0edb4152c240470fd4cd9613fe9e21aa446f0335c9c342fbff6c53d5073e68dadb12ef70e0f8086381f37abcc7211aea37f796d707780214f041b68b05b8d351131452675869fd1066053aa436f9488e6950731efc14cbf5d85b567ce52d91a6a23dbf1dbddfdec88795f39e6acf31365fb1cadc046f6066cacc02ae521a843dcf94cfbaf0274148c6ab302732bd6a43cba6ee2aa4e974164aab7b1ebf424bb6ed6d9ce822ccc0d0c7ce1a9c34dc3c59b527d2f79fc4135109da9610de15165c96ac9abbae710732e1992d3b9c7cc6525abe1da78ec7c3fb5808cbc31edb9a8fea9c7ba353d2c480185a076506f9274d12e7410701479a4fe3203166c332f12b44820291f659f691f60391f76bd232777851adc7845d55ace38a96a7c416296c5b6f5e3d0f545b6f1d65637b2c1d87c438a5f9954feb2d778046171e3cce68551c9302e20ff08c594c4941f433f753461226fda4cf161f2318264ef1935efce5f45a36b83469f6982ed594076a7dce51f07f2919a69f6947ad96d1b58ca85049cac668b397c6d3e8de165be1600e0e444cdd0d90ff60c95a9fdf3949fdd5db658ef720ecc2aea34662dbd8aa7be19086d7e8f694a0608f366b1a493b2aceff1086cbe9ef888b7de61e396e4b32fac89077eb9a522628af7440011ec7a40e0006d2b2ca2c027d939dfa9cf5b79f509639c3cf36d4cdeb7f79b908eb3b2cb3a636d8f3cc222808f9f45346e577ff0365268e1b604c96485b990159f8cf991e80ed75f2f1b225979dd2eeab72419624abde878de52c0ec7cf1c807e9e81131e24f3ea2eb68b3ab5efa80f56edd608eacc1b7d6dfd216010591ecb23282853eae561215379c0e51626f3f0af3a4c8fb4084155f88f007c7665f50581aa9c46d357a963e0f00a11af02eb3b275299d6a7928740609e702c99dac42a94a26199345f22599e4566f9fd702f60da837042466345b601151d008ea37ca1b958bed80d8832c49705b4747f2916cc5fb8b30b5b055fc150a8ee5ee9f147b220e8c165b738972446a58b7a67707620702851850e52cbacc0dd6f157794dd4875bbb4faeb0783a660b758a08dbc4648d4a41f18690c5c5eabea6ce63b5902ceea56c38c165ffcd328d70ebe9d7a3d332f94944c6071daab9299807ae893f6dbb96e911d30b3957a023138ffd347e77787e3a47a3a6c36da2b35b8d3d505d3c840bdb008fa15109e80fef37a56a150215d1a94fa86625eb3cf1bfe1e3ac3097e8756fe63b92063b1b3369e54d7e6825a69fdd7b9ce988f4f5c753ff53f26823153468f673ffdaf1b4243ae60b8f3270e6b89d658ed7a71495743157c19208956aecb16ce3f2b589fecba4a87f727d25236c1c33ba65e78b1edb0ac53dec6d7ad9e14455b5ba4cf262a043fb432d1d05e0d0148cf74fb847532d7a5eb43c20f5559b925266073e0c3cdaca01db9bdf7b9212036958a72de6b9df558b930c427609110cfee18799227479b73f76422773c3d3589be54a6d7e76d7bfd376e12bb3e52f638a24c66438d76bf9cfe0e868d92d0710ee1b36a7764b1d7fe237e4c01ef62c310582170442aa74d5dc1cdc95819adb7bcb46e20a42cffcd953cd5f0a2aa192cb4b27a73d750a4824095bc0db1b4f1c8ed220e97a8f196e0446524f36600f9ea10f6dec182be06e8aff4e5e735d91e294e79335b7a1c1863a3beb9d6be4b3694ddc03e4e9bc5c318292ba20c113890fb5bcad68080502eed37c1ecec2c54fcd208979250c158a2f7c25b55c902ff0037ebeceee3e530c49a30d98ff7fb65016f9b7c2f965523ba99d1a25b7322e9d8c9fc6b89a529e2d9eaad2ec1355eb112dff8431ebc367571516ad7e347918619441b2af3773ae2cf36f95ce9abd49724fe9a40f6eccb1e8df9f665a7e4332c66a37b47f41813036be6d41392ebce034e856bfae93611d71c09788cdfc495d59481db79647dcef0141334991ad098426f7143d2146af3cd040d8b33b71323d23ead781424551f6aea25fc2929b2e96b2382e51ed6a412ab22cfdf17ad0b6aeee49e644b62159cadf4bfbc85fab8b07596cf32498f44fafb1b0cdef95f0af71b66ca8f63229c026be0c13663efac8a988f8f5e14eb3a323486cc410ea86e479551d48cd62f229f1ecee1ed0181d8fa55458f9e2aea9dfe277372fae8ccb70567efd7c788f6a1e0ac67cf15eac2e5cad1b5ef983c96e145169c2471a45593879573d61b9ea1966e24261ea4489ebaf42f9b5fa077cec39d65e60eea2c2db909e2996ccd0f3c7b62fef532e43a27b7398ce68cc9dcbad5dce0b00b048ed08aa5f023841bf56cc8a2aecc74c3a850072526e5636ff3f2f7a4168b870b98bc920cd578f82f9879eb5261480144f945725275c87750c57b67e3962986230aafb645b9dc316498884d09c38221f35d64affbccb1f5f685bca73f43fb5280894e52d15d2c5283a0693371f9c8b048b4ea02b411481a7d09d7faeca7ed2157f271a0617b607db26dac942bc814cb3266020e6f408062ca6a98b2e1a5067ed6d3e8b7b2197f9408d28665b9178b1730b4bf8b023cfccc9806d79266a3c490fbb8f6d31e5acc10ba6fbd17327303d3e55d9182e884677b6eadee63ef101ce879fa11a0baf467864b8e5ab4f361ff17e77a23291e0b5135e9fda5919f1c97c6d540ad4aa11256e3f85282e4b7b5cb5d3ac5c32f3bb8d01bc839b2a23e1400364ca6efe18e3e6b018d636b2dda734c85e3f444902a30d3133925844409df5a3f67ecde789fb81844bf45dd8e6a4f7dfe99b6f67eb9933e482b4dcf9a2525cdfaadd322fa858f4e8c6f5b038a97535730eb9b5ae79541cf6f25970b5d00750754e300c70dd4f3bec12fa15ff765d7ccea4b80a55a0b84fd459b8811bf3f4e98f4e3e0716dfd54dfe5ad2d7f355fd565c203d08c982c48e9b1dd98168060d5236a1190bfb7a768078b2fbba2d9fe4765fbf4ea65816cadea2b25a6a9ef4bb94045e28dccd9183958f3519dd08e81bef20ae9fbd30cf6008305b1362b59db67d4fa00b43129910de219bedf9e853e06ecadb09726771b5602ef1f8e33c7fa54d93c028f594bc4ae8eebba6ad021c66432a57eea61e311299d0c785c260892c18137b211ad4e73c49da12275a1e643fe123f798ea318058645e121791ab96f1b5a818c6a409c6fdd18593e98157248f19a90a3feda47216af3be806153a7a122db62c9a72e66bd0d3afe079e825dbe49774c4d297319839d6b0f86aa09438d8f5df0f5fb37eb14e7b661de24d61a82c16f8b52488f6c3aae49d56a69d4be785b27e54c52235ef6589b6c5247cb877929856c1efb9273c8f083849506b68f80eb69bded668bc6fdcc2b9c98d23ad5b8608473abe59c3c1a989c235eea50b133883cc9ddd2b2852676948cd8379be570677e04afbf3f33658dda7b1f957204290397e866a76b44d2e866bc5edca6653bfe28bf9a941142cf2c29fc99a8cdbf32e24cac9f908a1bd878b0e99ad210196a92d869b1d53bcc59c4f9869ec7074003dbc4e78026d9452a5c693d33a35ed16f3a799447509a7b543ff8e092f03a53864828e63792df68868d6c8121ec8f2d1beea8bf570d385897902073248ce38b3c1988de382ba212d29be22a54643974920a8df7a6eb7af07e5230e2afadbefb404fbc1d5e744214fc883bb8316ef46b12d08b1381a639b89fc5c8c0035da4ccfd807d696ce608676687b1b226f4fe1b664dd6b43d93c0964bfb12c625aa917924505468531d529990f97d4a50de1faf87984b3f9a696bdfce0f277224efb7fcba94d18f956e77e69b6c180a36c26f704c8efe8bd3cb29d8f2bc138c6208cbf11e7b430a4d676e297b28207b9a69", 0x1000}, {&(0x7f0000001a00)="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", 0x1000}, {&(0x7f0000002a00)="58a98186b4b62be22e2a11ec260c8253762c424a0189e6b70d3e9f5a2caf8229516bfb01356bb19551f715ede7a91c39a269197ed044543ee5f93243ab", 0x3d}, {&(0x7f0000002a40)="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", 0xfc}], 0x4, &(0x7f0000002b80)={0xf0, 0x108, 0x0, "299c2cb8eeecdcced20ee07d6f6d3c322f20524c64799748fc9d7e37b1ad0e51dfbca6321f88bf2d33dabedf76c0066ca1a57b640e16e6b203ab801e2588ec32c468a1476235e0806d14e7185cecf567f181098744745a038685e97b301e2ee81819cc6ce3296a04ff06013c0543ecfa8fe64b0b92d89b1eb159737d02985bec26fd5bda02fd1b98d64db24078a63eceb8a790c4091a28f948e0737204d312969a0def1a5eff6fe3004b4e11191d63c189b7279c03ff81e44747f01194ae46b5b170b0b49be3cad67092555d0060d0c744a9e8a3306c1b745ba4651fe4891f"}, 0xf0, 0x40}, {&(0x7f0000002c80)={0x27, 0x1, 0x2, 0x6, 0x9, 0x3f, "ff3599c02ed6ffcfb2016f7333428af9d94e4af98a1a267b8f663225991e6059313e7371fcebbe29dfc8383a93c55f1e5b015ecf0ae97e9fd6bf14e1719bbd", 0x3f}, 0x60, &(0x7f0000003140)=[{&(0x7f0000002d00)="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", 0xfe}, {&(0x7f0000002e00)="e69b6354f71a7a29e027ad5d297f0454f44a06c7447588d1ceae8fea7098a6a21643d21a94ad00527b0c", 0x2a}, {&(0x7f0000002e40)="a062d83a941dc24bc4c4d8831d58236e74cc4f85939071585708ae6c85c813fd06816bfbed6439ba7f848ea205fb47812a6f527cb413799cd75febaef06221aa676b38a7644f4df3c43596600af8d487e4b13a5de6044e917044d9dc8e26bf056b2ae2c5791db4abe397a276e5be9b41644563ae7def145d55fdfb3861195e3182537a419649311a994276a8fb40eb2559dd78d5fce9c029fb2ffc80fe57adaa3dbb833d424f634b1b0a4825a905fceeaf59b6f200334056f6d970776dda79fd079249ed19283f04330a8a40ad389a305669b203269b34ad9c980c726d24e68fdc", 0xe1}, {&(0x7f0000002f40)="69dcd1532cb33b58b7277d102bef778837d500a093c0825ce9d50b7ad7cbcc3c34a42c4cd321724e66cbd202aad89d6b00f43c1d4c2393e36d9bf8f92d88aec12151282cc1a3c0e18bda35d8fcf5ec48260622d39f72644c7f96167fb60480f576f7751574bb23983352cbd2d593ae76ad09e0f2448825bbaaba8d2a1663d82929c3f74928f7179e440b0f1ae879e483969356d604a51c31a880d0ada7eb9286a50f3e2fd4a9ead7d42105994bfbcfb175bea183878f49707581", 0xba}, {&(0x7f0000003000)="cac9ed3d424f722a3d9f71e59045d4f4a74979f49258f8f076572f72", 0x1c}, {&(0x7f0000003040)="ac1f09ed5fcec43437054141f52be9c8a53692f91245a6237b6c22cae084805f8cc9a3120d28fa60a99bb21bd827510e63d36d03ad04433fb98686cfc15078d6654c29671fa427a9a4efb8003080bdb93aa6356c8f522662e230e4444b15528cfa80745ceccaeaa6dd67e5ec4f9c27fb43586f4a24764842a7ea83e88fe904b5dc51e9374fed4a985c714113dc6a06af26591ac3c8908b2216c636304156346c35aece43947055a4b61d0c4314ce2802f766e96cba9b1c4e52d7639d665708169c5475d2e8d04ed55a", 0xc9}], 0x6, &(0x7f00000031c0)={0x58, 0x0, 0x9, "991fac158ec057da3af5cc6c0584a33300c3b266b81ef053684a09cd485728aff28cd3bfb604192d98a496b0fed76cc396a93e3b8f92ec3ded0d7a8d0f10cd86dc742c193232"}, 0x58, 0x8800}, {&(0x7f0000003240)={0x27, 0x0, 0x0, 0x3, 0x7, 0xfffffffffffffffc, "86d18ecae711b052104f5e4901ab30d5bd3f27301c3f299b60fa1d83156725dba97ec54c84944f94ce57596d6d70917de646a8f5ad849bf82077873ee9d953", 0x27}, 0x60, &(0x7f0000003540)=[{&(0x7f00000032c0)="e2423a0f0cf92fa454d9200c508ede58decd2ae8e7e4de7af2954f67f4dd5f4488159dfb1358de44d319cf38d18ea1c74a007adf0dc7568ba5270bbee2c7ddf113b8ef789b30050b889d9bd80aa4ed48bfdfc7b8436fb9009cf0dd3d0e3420d1b2588b2d06c7a100b4fa513de1b6f6efdeda9a0ef674203121815172e9d5fbb7cea25d38a7bf7e2ae35a0356ec7f42e0acc394bebebb2278a19673961ba301c31d0a11c461eda867ead1ede7e4c6e7cfaf628a9ff362c6a506f3dce14b407b332f170141b85bc53613600542aa083fd4a1301e69fe86ec4639099ef85f953223c4565d50c47123fbde7da6943bf2d3c68f375015fe45", 0xf6}, {&(0x7f00000033c0)="bf92c3f3812122f105b27a62448fd74aacbfdd6a3683fc7cb2048b87e25f7ccdbcf9c533f933cd10dffdaba6a01f84b05f25a28d57bf8f28cd61b34e9f525fb92f069923786b08ad37501606080baefaf04c8107256fc875fb47d97c500c56f5bfed8923a2005e89d2bb31bff395121a60b86ec9314be707e39ae16272fd4fcff78fc192856d13fc21ef6837f86b861a8d3bec8e3727d21b", 0x98}, {&(0x7f0000003480)="41be5bd39fb543d3a4c2dad628cef085c0b9d71ce0e83092423132c11af7440690cdf22c0b1ed1b1994b7f06bf03cbd4a9c1ab1ecdb5e569b40bf7804d5cafa6d7685a9ca2d6f7af81e698d1c0df1e2be38b96fd14bfe6122479c7646067b2b1ad308d437307c0e9f37b58c6dbad431cbfd882d81038bc6014ea11c73ea278384cf10f76e9fafed02cc88084a8ad88c1cbaf127bbbf75759c0517c483536baa72a6beca318fff4f4f9e7c42dffb94a47faf69400", 0xb4}], 0x3, &(0x7f0000003580)={0x58, 0x3a, 0x2, "87420ae5b4c0d317434b7c1b520bb00a53d2abf5613016cb3d1801fadf2bb4bba2169d6e88a86ac7ad4c2876d4fca5dead3940b7d0699e306150334db8147601fd308d8411ae264b"}, 0x58, 0x8000}, {&(0x7f0000003600)={0x27, 0x1, 0x1, 0x3, 0x80, 0x100, "ce32cda6275c5bb3688f3a5de05a11c149c9f2cc9f1e28cf3fb0c2c522aa95576556933df7a52de42ec3c74495559ddde605043793875502b6253ce46e722b", 0xf}, 0x60, &(0x7f0000004800)=[{&(0x7f0000003680)="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", 0x1000}, {&(0x7f0000004680)="26f76b986bfa67f6312640e2e9e10ad3f30d13eb8b85eaa2c6e6903d557a0007636b6971632fe35ae3a3190ec179406086a8656ab167d4c493b690b763c8522424aed3f3660640e117e2ac2eda6a2f210af47ebe54d79f7ebee569bb6357d53f8f66b1c8bf94c4ad118b6859ed68621463eb891048955b73edccd7214e8e879c610105245d", 0x85}, {&(0x7f0000004740)="6d39bee5ba2e450adc2f1d884852b2073b252f5a8a466c7a71b6c81094b2497479e96eff9c2c864c2315132611bec504fd551eb2b3ad926276287dcc8d53b8d2dc0f0f78da7197e08caef135a6419619bb0d6bc5ae103f2729686f84186e20ef2c635d54cad2b4b638071afc6ed2289a944d45f091cc2a8ea3a557665e9354e24ff0e216f2d393c4d94d9b0885f3c9b294d4fae5a291d4", 0x97}], 0x3, 0x0, 0x0, 0x40000}], 0x7, 0x20008010) userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:24 executing program 5: r0 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x80800) recvmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000180)=@nl=@unspec, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/133, 0x85}, {&(0x7f0000000400)=""/222, 0xde}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/9, 0x9}, {&(0x7f0000000500)=""/87, 0x57}], 0x5, &(0x7f0000000600)=""/255, 0xff}, 0x1000}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001780)=""/112, 0x70}, {&(0x7f0000001800)=""/136, 0x88}, {&(0x7f00000018c0)=""/166, 0xa6}, {&(0x7f0000001980)=""/96, 0x60}, {&(0x7f0000001a00)=""/109, 0x6d}], 0x5, &(0x7f0000001b00)=""/161, 0xa1}, 0xfff}, {{&(0x7f0000001bc0)=@ipx, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000300)=""/56, 0x38}, {&(0x7f0000001c40)=""/224, 0xe0}, {&(0x7f0000001d40)=""/136, 0x88}, {&(0x7f0000001e00)=""/236, 0xec}, {&(0x7f0000001f00)=""/80, 0x50}, {&(0x7f0000000380)=""/34, 0x22}], 0x6, &(0x7f0000000700)=""/36, 0x24}, 0x3}], 0x3, 0x40002061, &(0x7f00000020c0)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r3, r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 917.712707] device batadv0 entered promiscuous mode [ 917.739045] device vxcan0 entered promiscuous mode 16:13:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:25 executing program 5: r0 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x80800) recvmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000180)=@nl=@unspec, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/133, 0x85}, {&(0x7f0000000400)=""/222, 0xde}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/9, 0x9}, {&(0x7f0000000500)=""/87, 0x57}], 0x5, &(0x7f0000000600)=""/255, 0xff}, 0x1000}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001780)=""/112, 0x70}, {&(0x7f0000001800)=""/136, 0x88}, {&(0x7f00000018c0)=""/166, 0xa6}, {&(0x7f0000001980)=""/96, 0x60}, {&(0x7f0000001a00)=""/109, 0x6d}], 0x5, &(0x7f0000001b00)=""/161, 0xa1}, 0xfff}, {{&(0x7f0000001bc0)=@ipx, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000300)=""/56, 0x38}, {&(0x7f0000001c40)=""/224, 0xe0}, {&(0x7f0000001d40)=""/136, 0x88}, {&(0x7f0000001e00)=""/236, 0xec}, {&(0x7f0000001f00)=""/80, 0x50}, {&(0x7f0000000380)=""/34, 0x22}], 0x6, &(0x7f0000000700)=""/36, 0x24}, 0x3}], 0x3, 0x40002061, &(0x7f00000020c0)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r3, r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 917.772926] device vxcan1 entered promiscuous mode [ 917.791371] device netdevsim4 entered promiscuous mode [ 917.850154] device veth0 entered promiscuous mode [ 917.871169] device veth1 entered promiscuous mode 16:13:25 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 917.903724] device veth0_to_bridge entered promiscuous mode [ 917.934235] device veth1_to_bridge entered promiscuous mode 16:13:25 executing program 5: r0 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x80800) recvmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000180)=@nl=@unspec, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/133, 0x85}, {&(0x7f0000000400)=""/222, 0xde}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/9, 0x9}, {&(0x7f0000000500)=""/87, 0x57}], 0x5, &(0x7f0000000600)=""/255, 0xff}, 0x1000}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001780)=""/112, 0x70}, {&(0x7f0000001800)=""/136, 0x88}, {&(0x7f00000018c0)=""/166, 0xa6}, {&(0x7f0000001980)=""/96, 0x60}, {&(0x7f0000001a00)=""/109, 0x6d}], 0x5, &(0x7f0000001b00)=""/161, 0xa1}, 0xfff}, {{&(0x7f0000001bc0)=@ipx, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000300)=""/56, 0x38}, {&(0x7f0000001c40)=""/224, 0xe0}, {&(0x7f0000001d40)=""/136, 0x88}, {&(0x7f0000001e00)=""/236, 0xec}, {&(0x7f0000001f00)=""/80, 0x50}, {&(0x7f0000000380)=""/34, 0x22}], 0x6, &(0x7f0000000700)=""/36, 0x24}, 0x3}], 0x3, 0x40002061, &(0x7f00000020c0)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r3, r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 917.963621] device veth0_to_bond entered promiscuous mode [ 917.972610] device veth1_to_bond entered promiscuous mode [ 918.024856] device veth0_to_team entered promiscuous mode [ 918.070032] device veth1_to_team entered promiscuous mode [ 918.100951] device veth0_to_hsr entered promiscuous mode [ 918.142981] device hsr_slave_0 entered promiscuous mode [ 918.189530] device veth1_to_hsr entered promiscuous mode [ 918.228809] device hsr_slave_1 entered promiscuous mode 16:13:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x400, 0x1) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000180)="32692fec39d30fcb5126775e0ddf847283c7ff2500064e55a849a89e15bd7ea8483c0798461e8404a1f7114e6ce2d1e44c7797010a34fb4993d2bbe0c734a7f227c77c092d121f88729c021914d0bd4711c4cdb6a3508ba5b8ea32d50fcad72f3237f1fa1708a7cc3fb100a0756b065b3adb", 0x72) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:25 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x4000000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:25 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffff}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 918.364740] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 918.434620] netlink: 'syz-executor5': attribute type 16 has an invalid length. [ 918.444112] device lo entered promiscuous mode [ 918.450599] device tunl0 entered promiscuous mode [ 918.524635] device gre0 entered promiscuous mode 16:13:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x7f', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 918.562607] device gretap0 entered promiscuous mode 16:13:25 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 918.587412] device erspan0 entered promiscuous mode [ 918.600425] device ip_vti0 entered promiscuous mode [ 918.616419] device ip6_vti0 entered promiscuous mode [ 918.630881] device sit0 entered promiscuous mode [ 918.673469] device ip6tnl0 entered promiscuous mode [ 918.696862] device ip6gre0 entered promiscuous mode [ 918.713933] device syz_tun entered promiscuous mode [ 918.741591] device ip6gretap0 entered promiscuous mode [ 918.794006] device bridge0 entered promiscuous mode [ 918.843317] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 918.896544] device vcan0 entered promiscuous mode [ 918.935015] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:13:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') prctl$PR_SET_FPEMU(0xa, 0x3) userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 918.979400] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 919.011181] device bond0 entered promiscuous mode [ 919.029911] device bond_slave_0 entered promiscuous mode [ 919.042315] device bond_slave_1 entered promiscuous mode [ 919.079951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.140168] device team0 entered promiscuous mode [ 919.158332] device team_slave_0 entered promiscuous mode [ 919.207369] device team_slave_1 entered promiscuous mode [ 919.272760] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 919.340911] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.374240] device dummy0 entered promiscuous mode 16:13:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\t', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 919.406085] device nlmon0 entered promiscuous mode [ 919.452118] device caif0 entered promiscuous mode [ 919.470175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 16:13:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(aegis256)\x00'}, 0x4e5f8257) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xfffffffffffffffe, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x103000, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000180)={0xffffffff, "0635fb6692aab153ec1d33a640c3ac9c5537b902adf6d31d83ee4121655412a6", 0x3, 0x9, 0xffffffffffffffff, 0x84409094edf0776f, 0x8}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x9, 0xffffffffffff0000, 0x0, 0x3, 0x1f}) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000040)={0xd3b, "feb5dad90c224bab9b77848ea3630194139de374c404c959230c8c9f9e5cbc41", 0x2, 0x1}) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000240)) [ 919.511978] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:26 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x800000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 919.713790] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 919.723743] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 919.739224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 919.749470] 8021q: adding VLAN 0 to HW filter on device ÿ [ 919.776248] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 919.787343] 8021q: adding VLAN 0 to HW filter on device team0 16:13:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 919.892231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 919.937655] netlink: 'syz-executor5': attribute type 16 has an invalid length. 16:13:27 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 919.978113] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 920.052475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 16:13:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 920.141391] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 920.173331] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:13:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 920.341237] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 920.365490] device lo left promiscuous mode 16:13:27 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') prctl$PR_SET_FPEMU(0xa, 0x3) userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:27 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 920.392523] device tunl0 left promiscuous mode [ 920.402901] device gre0 left promiscuous mode [ 920.410610] device gretap0 left promiscuous mode [ 920.417802] device erspan0 left promiscuous mode [ 920.443492] device ip_vti0 left promiscuous mode [ 920.454909] device ip6_vti0 left promiscuous mode [ 920.462643] device sit0 left promiscuous mode [ 920.471643] device ip6tnl0 left promiscuous mode [ 920.492504] device ip6gre0 left promiscuous mode 16:13:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x200) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 920.525221] device syz_tun left promiscuous mode [ 920.539972] device ip6gretap0 left promiscuous mode 16:13:27 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 920.637612] device bridge0 left promiscuous mode [ 920.689327] device vcan0 left promiscuous mode [ 920.717790] device ÿ left promiscuous mode [ 920.770053] device team0 left promiscuous mode [ 920.802771] device dummy0 left promiscuous mode [ 920.822538] device nlmon0 left promiscuous mode [ 920.841370] device caif0 left promiscuous mode [ 920.854603] device batadv0 left promiscuous mode [ 920.867815] device vxcan0 left promiscuous mode [ 920.883637] device vxcan1 left promiscuous mode [ 920.899896] device netdevsim4 left promiscuous mode 16:13:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 920.914505] device veth0 left promiscuous mode 16:13:28 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f00000000c0)={0x0, {0x1, 0x53, 0x3, 0xffff}}) [ 920.941162] device veth1 left promiscuous mode [ 920.956835] device veth0_to_bridge left promiscuous mode [ 920.984696] device veth1_to_bridge left promiscuous mode [ 920.997736] device veth0_to_bond left promiscuous mode [ 921.021427] device bond_slave_0 left promiscuous mode [ 921.053464] device veth1_to_bond left promiscuous mode [ 921.058881] device bond_slave_1 left promiscuous mode [ 921.105906] device veth0_to_team left promiscuous mode [ 921.111547] device team_slave_0 left promiscuous mode 16:13:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x1, &(0x7f0000000180)=[{&(0x7f00000005c0)="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", 0x1000, 0xccbc}], 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB='norecovery,quota=account,quota=account,pcr=00000000000000000042,fsuuid={;s18\x00\x002-s7f\x00-=7ws-3w{\x00-65w350we,subj_role=hash\x00,context=root,euid=', @ANYRESDEC=r2, @ANYBLOB="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"]) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x03', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 921.182800] device veth1_to_team left promiscuous mode [ 921.188255] device team_slave_1 left promiscuous mode [ 921.244948] device veth0_to_hsr left promiscuous mode [ 921.250410] device hsr_slave_0 left promiscuous mode [ 921.256122] device veth1_to_hsr left promiscuous mode [ 921.261610] device hsr_slave_1 left promiscuous mode 16:13:28 executing program 0: connect$pppoe(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:28 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x900}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 921.564029] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) bind$pptp(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x3) close(0xffffffffffffffff) getpeername$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000200)={r4, 0x1, 0x6, @random="16c21f74dc4a"}, 0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xff', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:29 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffc3}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 921.790500] gfs2: invalid mount option: pcr=00000000000000000042 16:13:29 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat%', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 921.947242] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 921.948302] gfs2: can't parse mount arguments 16:13:29 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 922.022118] device lo entered promiscuous mode [ 922.065384] device tunl0 entered promiscuous mode [ 922.103952] device gre0 entered promiscuous mode [ 922.141985] device gretap0 entered promiscuous mode [ 922.165026] device erspan0 entered promiscuous mode 16:13:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x3e6) close(0xffffffffffffffff) arch_prctl$ARCH_SET_GS(0x1001, 0x3) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1, 0x0) userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 922.218787] device ip_vti0 entered promiscuous mode [ 922.258161] device ip6_vti0 entered promiscuous mode 16:13:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xfb', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 922.334044] device sit0 entered promiscuous mode [ 922.382601] device ip6tnl0 entered promiscuous mode 16:13:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x9, 0x3ff, 0x400, 0x800}, {0x1, 0x400, 0x5, 0x8000}]}, 0x10) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 922.432782] device ip6gre0 entered promiscuous mode 16:13:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 922.513160] device syz_tun entered promiscuous mode [ 922.523850] device ip6gretap0 entered promiscuous mode [ 922.538916] device bridge0 entered promiscuous mode [ 922.557900] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 922.601545] device vcan0 entered promiscuous mode [ 922.621700] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:13:30 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x3f00}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 922.654781] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 922.682607] device ÿ entered promiscuous mode 16:13:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x3e6) close(0xffffffffffffffff) arch_prctl$ARCH_SET_GS(0x1001, 0x3) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1, 0x0) userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 922.709907] device bond_slave_0 entered promiscuous mode [ 922.766988] device bond_slave_1 entered promiscuous mode 16:13:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 922.824852] 8021q: adding VLAN 0 to HW filter on device ÿ [ 922.847987] device team0 entered promiscuous mode [ 922.885232] device team_slave_0 entered promiscuous mode [ 922.922188] device team_slave_1 entered promiscuous mode [ 922.928629] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 923.005897] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.068575] device dummy0 entered promiscuous mode [ 923.143786] device nlmon0 entered promiscuous mode 16:13:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 923.234764] device caif0 entered promiscuous mode [ 923.239635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 16:13:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:30 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x100000000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0xa4080, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x40000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x50800, 0x0) syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x8200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x800, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req3={0x3, 0x7, 0x2, 0x1, 0x7, 0x40, 0x90a}, 0x1c) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x7ca8, 0x4) userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 923.450495] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 923.513080] device lo left promiscuous mode [ 923.534623] device tunl0 left promiscuous mode [ 923.560128] device gre0 left promiscuous mode 16:13:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xff', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 923.585714] device gretap0 left promiscuous mode [ 923.653322] device erspan0 left promiscuous mode 16:13:31 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 923.700944] device ip_vti0 left promiscuous mode [ 923.736546] device ip6_vti0 left promiscuous mode [ 923.769879] device sit0 left promiscuous mode [ 923.817287] device ip6tnl0 left promiscuous mode [ 923.857144] device ip6gre0 left promiscuous mode 16:13:31 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x800000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 923.887026] device syz_tun left promiscuous mode [ 923.904361] device ip6gretap0 left promiscuous mode 16:13:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat9', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 923.936845] device bridge0 left promiscuous mode 16:13:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000300)=0x6, 0x4) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x408400, 0x8) syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x363be21c, 0x2001) r3 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 923.969604] device vcan0 left promiscuous mode [ 924.021149] device ÿ left promiscuous mode [ 924.056560] device bond_slave_0 left promiscuous mode [ 924.100415] device bond_slave_1 left promiscuous mode 16:13:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 924.155541] device team0 left promiscuous mode [ 924.185719] device team_slave_0 left promiscuous mode [ 924.212574] device team_slave_1 left promiscuous mode [ 924.289360] device dummy0 left promiscuous mode [ 924.340454] device nlmon0 left promiscuous mode [ 924.380082] device caif0 left promiscuous mode 16:13:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xf7', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65580000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:31 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc0\x00', 0x301800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000440)={0x9, 0x4, 0x59b}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x0, 0x0) bind$pptp(r3, &(0x7f0000000500)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) timer_create(0x2, &(0x7f0000000380)={0x0, 0x1e, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) timer_getoverrun(r4) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x1, @loopback, 0xfffffffffffffff8}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={r5, 0x1, 0xbb, 0xffffffff, 0x7ff, 0x1ff, 0x4, 0xe86, {r6, @in={{0x2, 0x4e21, @local}}, 0x1, 0x7f, 0x9, 0x7f, 0x3}}, &(0x7f0000000340)=0xb0) 16:13:31 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 924.619548] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x02', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:32 executing program 5: 16:13:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:32 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 924.958862] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:32 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:32 executing program 5: 16:13:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x04', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x74}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:32 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:32 executing program 5: [ 925.352132] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) close(0xffffffffffffffff) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f00000005c0)=""/4096) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x210400, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') fcntl$setflags(r0, 0x2, 0x1) r3 = add_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r3) userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:32 executing program 5: 16:13:32 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}}, [0x3, 0x2a, 0x924d, 0xfffffffffffff800, 0x2, 0x3, 0x60a5, 0x1, 0x737, 0x2, 0x9, 0x3, 0x10000, 0x80000001, 0xabe9]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x2, 0x8004, 0x17, 0x7, r3}, 0x10) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x7fffffff, 0x10000) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/31, 0x1f}], 0x1}, 0x40) bind$pptp(r4, 0x0, 0xff1c) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 925.630552] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:33 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:33 executing program 5: 16:13:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c00000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:33 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:33 executing program 5: [ 926.341673] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:33 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x40, 0x210002) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, 0x0) close(0xffffffffffffffff) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x0, 0xffff}, 0x8) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000380)="3a77c00b8aea9dcc69009572", 0xc, 0x10, &(0x7f00000003c0)={0xa, 0x4e22, 0x81, @loopback, 0x800}, 0x1c) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x1) r4 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x9, 0x12001) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x4) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) fchdir(r1) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0x0, 0xb2b1, 0x2, 0x4, 0x3a, 0x80, 0x100000000, 0xfffffffffffffff8, 0x9, 0xb948, 0x10001, 0xffffffff, 0x4, 0x7, 0x2000000000000000]}, &(0x7f00000002c0)=0x100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r5, 0x7cac, 0x9}, &(0x7f0000000340)=0xc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\xff', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:33 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:33 executing program 5: [ 926.571121] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) socket$inet(0x2, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000020000d0800000000000000000a00140000000000000000001500010014000100ff01000000000000000000000000000114000200fe8000000000bbdceb4c4ba9c3e77b2100000000000000000000086960b6e288fb5c8511ed42a2bf258a73e846a9d9fe5869d738f91ca7b6e6382373db9d3a6f60af23b85fe37a77"], 0x1}}, 0x0) [ 926.982891] device bridge_slave_1 left promiscuous mode [ 926.988514] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.043508] device bridge_slave_0 left promiscuous mode [ 927.049073] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.295064] team0 (unregistering): Port device team_slave_1 removed [ 927.314123] team0 (unregistering): Port device team_slave_0 removed [ 927.335578] bond0 (unregistering): Releasing backup interface bond_slave_1 16:13:34 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7400}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:34 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast1, 0x0, 0xff}, 0x0, @in6=@local}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0) recvmmsg(r1, &(0x7f0000000f00), 0x400000000000308, 0x10000, &(0x7f0000001000)={0x77359400}) 16:13:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 927.427290] bond0 (unregistering): Releasing backup interface bond_slave_0 16:13:34 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 927.778309] bond0 (unregistering): Released all slaves [ 927.971477] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 928.327718] IPVS: ftp: loaded support on port[0] = 21 [ 929.199566] chnl_net:caif_netlink_parms(): no params data found [ 929.619365] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.625966] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.633947] device bridge_slave_0 entered promiscuous mode [ 929.679867] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.686418] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.694695] device bridge_slave_1 entered promiscuous mode [ 929.814866] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 929.850477] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 929.986680] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 929.994799] team0: Port device team_slave_0 added [ 930.029377] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 930.036670] team0: Port device team_slave_1 added [ 930.069258] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 930.102926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 930.217776] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 930.251580] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 930.556209] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 931.643483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.743896] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 931.852823] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 931.858948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 931.866370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 931.968427] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 931.975007] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.079267] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 932.086480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 932.094865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 932.103002] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.109359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.116855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 932.207162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 932.214353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 932.222362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 932.230075] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.236488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.329818] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 932.336972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 932.443447] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 932.450302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 932.556928] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 932.563965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 932.572318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 932.580215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 932.675461] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 932.682436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 932.690340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 932.798727] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 932.805816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 932.813712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 932.916278] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 932.923371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 932.931103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 933.531307] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 933.793900] 8021q: adding VLAN 0 to HW filter on device batadv0 16:13:41 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast1, 0x0, 0xff}, 0x0, @in6=@local}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0) recvmmsg(r1, &(0x7f0000000f00), 0x400000000000308, 0x10000, &(0x7f0000001000)={0x77359400}) 16:13:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:41 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffff0}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:41 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x3f00000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 934.254913] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 934.286891] device lo entered promiscuous mode [ 934.291689] device tunl0 entered promiscuous mode 16:13:41 executing program 5: [ 934.343802] device gre0 entered promiscuous mode [ 934.367434] device gretap0 entered promiscuous mode [ 934.382145] device erspan0 entered promiscuous mode [ 934.392341] device ip_vti0 entered promiscuous mode 16:13:41 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 934.432122] device ip6_vti0 entered promiscuous mode 16:13:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e005, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 934.456293] device sit0 entered promiscuous mode [ 934.483122] device ip6tnl0 entered promiscuous mode 16:13:41 executing program 5: [ 934.507244] device ip6gre0 entered promiscuous mode [ 934.528312] device syz_tun entered promiscuous mode [ 934.556106] device ip6gretap0 entered promiscuous mode [ 934.585232] device bridge0 entered promiscuous mode [ 934.608397] device vcan0 entered promiscuous mode [ 934.633747] device ÿ entered promiscuous mode 16:13:42 executing program 5: [ 934.654212] device bond_slave_0 entered promiscuous mode [ 934.688858] device bond_slave_1 entered promiscuous mode 16:13:42 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 934.712175] device team0 entered promiscuous mode [ 934.755551] device team_slave_0 entered promiscuous mode [ 934.797854] device team_slave_1 entered promiscuous mode [ 934.824915] device dummy0 entered promiscuous mode [ 934.852543] device nlmon0 entered promiscuous mode [ 934.871625] device caif0 entered promiscuous mode [ 934.898444] device batadv0 entered promiscuous mode [ 934.931530] device vxcan0 entered promiscuous mode 16:13:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') accept(r0, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000003c0)=0x80) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0xa, "1dcc206c0877bf433846"}, &(0x7f00000002c0)=0x12) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000300)={r4, 0x3, 0x6, 0xcbdd}, 0x10) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x804030}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x202, 0x70bd27, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}}, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e006, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:42 executing program 5: [ 934.954806] device vxcan1 entered promiscuous mode [ 934.970126] device netdevsim4 entered promiscuous mode 16:13:42 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 934.997171] device veth0 entered promiscuous mode [ 935.011341] device veth1 entered promiscuous mode [ 935.028733] device veth0_to_bridge entered promiscuous mode [ 935.070834] device veth1_to_bridge entered promiscuous mode [ 935.122543] device veth0_to_bond entered promiscuous mode [ 935.157867] device veth1_to_bond entered promiscuous mode [ 935.189489] device veth0_to_team entered promiscuous mode [ 935.202226] device veth1_to_team entered promiscuous mode [ 935.227810] device veth0_to_hsr entered promiscuous mode 16:13:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd201}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/11, 0xb) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) 16:13:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e007, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:42 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:42 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x6e01000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 935.248700] device hsr_slave_0 entered promiscuous mode [ 935.266321] device veth1_to_hsr entered promiscuous mode [ 935.285070] device hsr_slave_1 entered promiscuous mode 16:13:42 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:42 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000600)) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 935.440530] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 935.451552] device lo left promiscuous mode [ 935.459975] device tunl0 left promiscuous mode [ 935.474294] device gre0 left promiscuous mode [ 935.546310] device gretap0 left promiscuous mode 16:13:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e00a, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 935.584732] device erspan0 left promiscuous mode 16:13:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e21, @multicast2}], 0x10) write$P9_RREADDIR(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="41010000290200020000002400000000080000000000000081000000000000001207002e2f66696c00300804000000040000000000000038000000000000008007002e2f66696c653080030000000300000000002f66696c653001000000000600000000000000e588000000000000ff07002e2f66696c653041020000000200000000000000ff010000000000000407002e2f66696c000080020000000800000000000000ff010000000000000707002e2f66ffff65300001000000070000000000000000000000000000000107002e2f66696c65304100040000050000000000000020000000000000000207002e2f66696c6530040100000006000000000000000000008000000000050000000000000065300402000000050000000000000000000100000000000507002e2f66696c6530b077585473b4b1d55e4d885a87665cd46ffd4489727db1b54009e62fd0a0c560a822079398292e1fd85e46d2ad95744f5c237f61e1d2deeb21164020d6a6f014f2095dd0c8c8cb2517bf8946e141a6386b5ff2175d6f9ba47f1e2c3476252583ef21373cbf6d2275804d"], 0x141) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 935.648435] device ip_vti0 left promiscuous mode [ 935.703338] device ip6_vti0 left promiscuous mode [ 935.770688] device sit0 left promiscuous mode 16:13:43 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 935.861140] device ip6tnl0 left promiscuous mode 16:13:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e002, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:43 executing program 5: unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) r4 = getpid() r5 = eventfd2(0x0, 0x0) read$eventfd(r5, &(0x7f0000000040), 0x8) execve(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$setown(r1, 0x8, r4) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) [ 935.917866] device ip6gre0 left promiscuous mode [ 935.963965] device syz_tun left promiscuous mode [ 936.005917] device ip6gretap0 left promiscuous mode [ 936.021572] device bridge0 left promiscuous mode [ 936.058721] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 936.088542] device vcan0 left promiscuous mode [ 936.119500] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 936.149209] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 936.203484] device ÿ left promiscuous mode [ 936.229172] 8021q: adding VLAN 0 to HW filter on device ÿ [ 936.245861] device team0 left promiscuous mode [ 936.260808] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 936.276229] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.286890] device dummy0 left promiscuous mode [ 936.315978] device nlmon0 left promiscuous mode [ 936.362944] device caif0 left promiscuous mode [ 936.367702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 16:13:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:43 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 16:13:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e003, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:43 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bind$x25(r2, &(0x7f0000000080)={0x9, @null=' \x00'}, 0x12) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:43 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 936.545028] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e014, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:44 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 936.631289] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 936.667096] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 936.752225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 16:13:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e010, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 937.020342] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:44 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 937.109017] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:13:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7a00000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e0e0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) shmget(0x3, 0x1000, 0x1, &(0x7f0000ffe000/0x1000)=nil) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:44 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x3f00}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 937.447790] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:44 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 937.517831] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:13:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e012, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:45 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)) openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x40, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) fanotify_init(0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffcc28c24334eb07c81d06ac6378964896addbed548280594c8410f862fbe09221dbbece298262cddbf92750b92ee63b137ed3e7b71ec45811fff81923cdb46ba7b235bf3dde5111fa7b1d69005fc99469c1e5062b5da1a34e2136e3f3014c44"], 0x60) close(r0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4843) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000140)=0x54) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, 0x0, 0x0) 16:13:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0xffff888098ae1658, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:45 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 938.054930] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 938.165343] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:13:45 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, 0x0, 0x0, 0x0) 16:13:45 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x181000, 0x110) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x8) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000180)={0x1}, 0x1) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, r1) userfaultfd(0x80000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x240, r5, 0x600, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @mcast1, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, [], 0x2b}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x223b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x357}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0xa4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x44000}, 0x48084) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000500)='./file0\x00', 0x0, 0x10}, 0x10) 16:13:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:45 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, 0x0, 0x0, 0x0) 16:13:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x1, 0x6, 0x0) [ 938.485289] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:45 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x900}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0xa, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 938.566239] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:13:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlockall() 16:13:46 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, 0x0, 0x0, 0x0) [ 938.818673] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0xffff888098ae19d8, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 938.859293] device lo entered promiscuous mode [ 938.907831] device tunl0 entered promiscuous mode [ 938.943340] device gre0 entered promiscuous mode 16:13:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3ff}, 0xfffffffffffffef7) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r0, &(0x7f0000000100), 0x190, 0x10400003) [ 938.973289] device gretap0 entered promiscuous mode [ 939.000170] device erspan0 entered promiscuous mode [ 939.034465] device ip_vti0 entered promiscuous mode [ 939.064897] device ip6_vti0 entered promiscuous mode [ 939.094405] device sit0 entered promiscuous mode [ 939.123858] device ip6tnl0 entered promiscuous mode [ 939.144246] device ip6gre0 entered promiscuous mode [ 939.159463] device syz_tun entered promiscuous mode [ 939.172906] device ip6gretap0 entered promiscuous mode [ 939.186048] device bridge0 entered promiscuous mode 16:13:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00', {}, 0x0, [], [], [0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x5], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) [ 939.200853] device vcan0 entered promiscuous mode [ 939.210643] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 939.237760] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 939.263514] device ÿ entered promiscuous mode [ 939.286097] device team0 entered promiscuous mode [ 939.304309] input: syz0 as /devices/virtual/input/input13 [ 939.326235] device dummy0 entered promiscuous mode [ 939.349256] device nlmon0 entered promiscuous mode [ 939.354503] input: syz0 as /devices/virtual/input/input14 [ 939.482889] device caif0 entered promiscuous mode [ 939.488041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 16:13:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000080)={0x46, 0x4, [0x0]}) userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x40800, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:47 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x16e}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) close(r1) socketpair$unix(0x1, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xf) 16:13:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe00}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:47 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/25) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) [ 939.724880] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 939.767270] device lo left promiscuous mode [ 939.787006] device tunl0 left promiscuous mode [ 939.824090] device gre0 left promiscuous mode [ 939.831604] device gretap0 left promiscuous mode [ 939.849081] device erspan0 left promiscuous mode [ 939.894802] device ip_vti0 left promiscuous mode [ 939.935252] device ip6_vti0 left promiscuous mode 16:13:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x63, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 939.966563] device sit0 left promiscuous mode 16:13:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) [ 939.997595] device ip6tnl0 left promiscuous mode [ 940.017387] device ip6gre0 left promiscuous mode [ 940.030694] device syz_tun left promiscuous mode [ 940.085172] device ip6gretap0 left promiscuous mode [ 940.115320] device bridge0 left promiscuous mode [ 940.140722] device vcan0 left promiscuous mode [ 940.182936] device ÿ left promiscuous mode [ 940.196206] device team0 left promiscuous mode [ 940.219500] device dummy0 left promiscuous mode [ 940.251166] device nlmon0 left promiscuous mode 16:13:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0xa00, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 940.310715] device caif0 left promiscuous mode [ 940.333073] device batadv0 left promiscuous mode [ 940.338258] device vxcan0 left promiscuous mode [ 940.350669] device vxcan1 left promiscuous mode [ 940.357260] device netdevsim4 left promiscuous mode [ 940.382116] device veth0 left promiscuous mode [ 940.388321] device veth1 left promiscuous mode [ 940.401346] device veth0_to_bridge left promiscuous mode [ 940.416529] device veth1_to_bridge left promiscuous mode [ 940.428998] device veth0_to_bond left promiscuous mode [ 940.437720] device bond_slave_0 left promiscuous mode [ 940.451388] device veth1_to_bond left promiscuous mode [ 940.460683] device bond_slave_1 left promiscuous mode [ 940.466537] device veth0_to_team left promiscuous mode [ 940.473899] device team_slave_0 left promiscuous mode [ 940.479434] device veth1_to_team left promiscuous mode [ 940.485405] device team_slave_1 left promiscuous mode [ 940.494433] device veth0_to_hsr left promiscuous mode [ 940.501478] device hsr_slave_0 left promiscuous mode [ 940.507261] device veth1_to_hsr left promiscuous mode [ 940.537454] device hsr_slave_1 left promiscuous mode 16:13:47 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x64}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0xfffffe3a, 0x0, 0xfed2, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a3, 0x400000000000) 16:13:47 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) 16:13:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x1, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r3, 0x20}, &(0x7f0000000280)=0x8) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200242, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) 16:13:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x2, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:48 executing program 5: r0 = epoll_create(0xfffd) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/11, 0x238) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)) clone(0x1102001bfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) [ 940.855679] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0xffffffffffffffc1, 0x0, 0x0, 0x0) dup2(r2, r1) 16:13:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x14, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 941.038930] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:13:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_team\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000000c000000e90000001b00010073667100480002000000000000000000000000000000fe0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea232582566aeab7a658973dde497ba2e42693a2961f550d48bb2ac9867543a6edd8b4b2cd64035d5089bcb7e547"], 0x1}}, 0x0) 16:13:48 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x3b000, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 941.198376] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:48 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:48 executing program 5: clock_getres(0x63c65394fd27c6cb, 0x0) 16:13:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x7900, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="000000000000000000000000000000000010000000000000ed793afe0000000002008201260001000000640000000001270005000000000000006400000000030d0085043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) 16:13:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:48 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0xfffffffffffffc98, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = accept(r1, 0x0, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000040)={{0x0, @loopback, 0x0, 0x2, 'wrr\x00'}, {@multicast2, 0x0, 0x10000, 0x0, 0x0, 0x80000000}}, 0x44) [ 941.653045] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4800}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:49 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/88, 0x58}], 0x1) pwritev(r0, &(0x7f0000000080), 0x30b, 0x0) 16:13:49 executing program 0: write$FUSE_NOTIFY_DELETE(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002980)={'vcan0\x00', 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) link(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file1\x00') sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x4, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9b5117f117e9a7f4"}}, 0x48}}, 0x0) 16:13:49 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x1, &(0x7f0000346fc8)=@raw=[@jmp={0x5, 0x0, 0x7}], &(0x7f0000000240)='GPL\x00', 0x2, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 941.816297] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x300, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 942.046814] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:49 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x64000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$inet(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x1, &(0x7f0000000140)=""/166, &(0x7f0000000040)=0x10000007d) 16:13:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="adef"]], 0x0, 0x0, 0x0}) 16:13:49 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000340)=""/237, 0xed}], 0x1, 0x0) 16:13:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 942.385806] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 942.424555] binder: 13449:13456 unknown command 536871488 16:13:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000100), 0x4) r3 = dup2(0xffffffffffffffff, r0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x12, 0x8, 0x2, 0x1, 0x1d, 0x1}) recvfrom(r2, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@known='com.apple.FinderInfo\x00', &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 942.458519] binder: 13449:13456 ioctl c0306201 20000000 returned -22 16:13:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="ad"]], 0x0, 0x0, 0x0}) 16:13:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x3a7, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:49 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0x64}}) [ 942.612538] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 942.644257] binder: 13475:13476 unknown command 536871488 [ 942.669683] device lo entered promiscuous mode [ 942.675349] device tunl0 entered promiscuous mode [ 942.682029] binder: 13475:13476 ioctl c0306201 20000000 returned -22 [ 942.705711] device gre0 entered promiscuous mode [ 942.730742] binder_alloc: binder_alloc_mmap_handler: 13475 20001000-20004000 already mapped failed -16 [ 942.745464] device gretap0 entered promiscuous mode [ 942.750677] device erspan0 entered promiscuous mode 16:13:50 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0x64}}) [ 942.786997] device ip_vti0 entered promiscuous mode [ 942.802409] device ip6_vti0 entered promiscuous mode [ 942.826523] binder: BINDER_SET_CONTEXT_MGR already set [ 942.836045] device sit0 entered promiscuous mode [ 942.849648] binder: 13475:13476 ioctl 40046207 0 returned -16 [ 942.875346] device ip6tnl0 entered promiscuous mode [ 942.913758] device ip6gre0 entered promiscuous mode [ 942.942358] device syz_tun entered promiscuous mode [ 942.997305] device ip6gretap0 entered promiscuous mode [ 943.022157] device bridge0 entered promiscuous mode [ 943.058380] device vcan0 entered promiscuous mode [ 943.081969] device ÿ entered promiscuous mode [ 943.087022] device bond_slave_0 entered promiscuous mode [ 943.093189] device bond_slave_1 entered promiscuous mode [ 943.099333] device team0 entered promiscuous mode [ 943.104728] device team_slave_0 entered promiscuous mode [ 943.110898] device team_slave_1 entered promiscuous mode [ 943.117370] device dummy0 entered promiscuous mode [ 943.122795] device nlmon0 entered promiscuous mode [ 943.128051] device caif0 entered promiscuous mode [ 943.133584] device batadv0 entered promiscuous mode [ 943.145402] device vxcan0 entered promiscuous mode [ 943.152000] device vxcan1 entered promiscuous mode [ 943.157248] device netdevsim4 entered promiscuous mode [ 943.163059] device veth0 entered promiscuous mode [ 943.168319] device veth1 entered promiscuous mode [ 943.173468] device veth0_to_bridge entered promiscuous mode [ 943.179622] device veth1_to_bridge entered promiscuous mode [ 943.185859] device veth0_to_bond entered promiscuous mode [ 943.191947] device veth1_to_bond entered promiscuous mode [ 943.197891] device veth0_to_team entered promiscuous mode [ 943.203916] device veth1_to_team entered promiscuous mode [ 943.209835] device veth0_to_hsr entered promiscuous mode [ 943.215657] device hsr_slave_0 entered promiscuous mode [ 943.221278] device veth1_to_hsr entered promiscuous mode [ 943.227108] device hsr_slave_1 entered promiscuous mode 16:13:50 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x100000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x7ffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) ioctl$BLKZEROOUT(r0, 0x127d, &(0x7f0000000000)={0xffffffffffffffff}) 16:13:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1, 0x20001000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$kcm(0x2, 0xa, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8916, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x02\x00\xdc\xff\x00\x00\x00\x00\x00\x00\x02?\xfa\xf3W\x14\xf9\x92N2\xde\xf8\xff\tj\xf3\xb8\xb4\xd2\xaf\x99\x97r\xe1v\xb2]W\xe4\xc3\xd9\xa7\xa4 \x90\x87\xa4\x1c#\x14\xa2\xee\xd0\xe3vY\xbc1\xdff4\x93O\xc6`%P\\c\xe7`;V\xfc7\xec\xd9,[\xc2\xeaL\xceg&\x1e7\xb9,\xe4\xf79i\xe2\xad\xf9\xf2\x85Z\x85\x15\xd8I&\x9e}\xeb\xb1\xa6Zf\x11\xf6\x01y\xe2\xcb\xa6\x95R\xaa\xff-\xfcU\x1c\x85\x9f\x8d\xc17l\xa5\xb9\xca\x9ej\xcf\xeeW') 16:13:50 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200), 0xfffffd07}]) 16:13:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:50 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000100)=0x83, 0x4) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00000000c0)=0x5, 0x4) sendto$unix(r0, &(0x7f0000000140)="1d9b000000007675d706d94e590291c9900d3be5299d0a4d3d1891a1fe3d8edd715c9f981c39daefbae33fbd06698cc347008df8", 0x34, 0x0, 0x0, 0x0) [ 943.403993] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 943.417917] syz-executor5 uses obsolete (PF_INET,SOCK_PACKET) 16:13:50 executing program 2: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000300)='./file0\x00', 0x1044, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000000)={0x2, 0x8000, 0x6, 0xfffffffffffffffb, 0x5, 0x4}) 16:13:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff9e}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:13:51 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x10003, 0x80011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) writev(r1, &(0x7f0000000080), 0x100000000000028d) 16:13:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x7ffffff9, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 943.913840] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) 16:13:51 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) gettid() fstat(0xffffffffffffffff, 0x0) stat(0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ed, 0x0) 16:13:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x3, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:51 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x4000000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:51 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) lstat(&(0x7f0000001540)='./file0\x00', 0x0) [ 944.380351] device lo left promiscuous mode [ 944.407186] device tunl0 left promiscuous mode [ 944.436253] device gre0 left promiscuous mode 16:13:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73d41196c3cdf8311cfc093a52a7d10000", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)="b72f6abdbc26314c1a347ce3031223e142b40c298ecbb34c7b3bcf86f03025054b23c3786d93c416a6151236e52e4292aca34b8f056ff7a869460a2927e71c6086caf40966e56bc5b3f18df7f06c61e3f1874f41b8c42f395ee11ab09dbfa0034e537530468f286ff971c5e6229b188bf6d2ae4ebb69998bbd84421f6b005795a3", 0x81}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) [ 944.472755] device gretap0 left promiscuous mode [ 944.482791] device erspan0 left promiscuous mode [ 944.490069] device ip_vti0 left promiscuous mode [ 944.497195] device ip6_vti0 left promiscuous mode 16:13:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x7800, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 944.536143] device sit0 left promiscuous mode [ 944.590691] device ip6tnl0 left promiscuous mode [ 944.630861] device ip6gre0 left promiscuous mode 16:13:52 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0xff9c) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200), 0xfffffd07}]) [ 944.673240] device syz_tun left promiscuous mode [ 944.704572] device ip6gretap0 left promiscuous mode [ 944.745906] device bridge0 left promiscuous mode 16:13:52 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) gettid() fstat(0xffffffffffffffff, 0x0) stat(0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ed, 0x0) [ 944.773982] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 944.803043] device vcan0 left promiscuous mode [ 944.816448] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 944.842454] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 944.871040] device ÿ left promiscuous mode 16:13:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0xffffffffffffffc1, 0x0, 0x0, 0x0) dup2(r2, r1) [ 944.910624] 8021q: adding VLAN 0 to HW filter on device ÿ [ 944.941149] device team0 left promiscuous mode [ 944.956035] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 944.980451] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.004133] device dummy0 left promiscuous mode [ 945.030723] device nlmon0 left promiscuous mode 16:13:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0xffffff1f, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 945.060039] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 945.081920] device caif0 left promiscuous mode [ 945.086715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 16:13:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ptrace(0x4206, r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0xc) wait4(0x0, 0x0, 0x0, 0x0) 16:13:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:52 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) unshare(0x20010000) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000480)={'veth0\x00', 0x3}) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r1 = socket(0x1, 0x1, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) fcntl$getown(r1, 0x9) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x0, [0x0, 0x20000400, 0x20000430, 0x20000460], 0x0, &(0x7f0000000600)}, 0x78) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) 16:13:52 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) gettid() fstat(0xffffffffffffffff, 0x0) stat(0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ed, 0x0) [ 945.297204] validate_nla: 1 callbacks suppressed [ 945.297214] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 945.342891] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:13:52 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:52 executing program 2: rt_sigaction(0x7, 0x0, 0x0, 0x8, &(0x7f00005eaff8)) 16:13:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0xcd00, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:52 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) [ 945.546797] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:52 executing program 5: syz_open_procfs(0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(0x0, 0x0, 0x0) [ 945.623859] device lo entered promiscuous mode [ 945.642825] device tunl0 entered promiscuous mode [ 945.654006] device gre0 entered promiscuous mode [ 945.666308] device gretap0 entered promiscuous mode [ 945.677131] device erspan0 entered promiscuous mode [ 945.693474] device ip_vti0 entered promiscuous mode [ 945.703786] device ip6_vti0 entered promiscuous mode [ 945.715291] device sit0 entered promiscuous mode [ 945.721991] device ip6tnl0 entered promiscuous mode [ 945.727456] device ip6gre0 entered promiscuous mode [ 945.764580] device syz_tun entered promiscuous mode [ 945.770474] device ip6gretap0 entered promiscuous mode [ 945.785186] device bridge0 entered promiscuous mode [ 945.793757] device vcan0 entered promiscuous mode [ 945.816257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:13:53 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 16:13:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x25, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 945.861055] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 945.887042] device ÿ entered promiscuous mode [ 945.914263] device team0 entered promiscuous mode [ 945.941358] device dummy0 entered promiscuous mode [ 945.964161] device nlmon0 entered promiscuous mode [ 946.012439] device caif0 entered promiscuous mode [ 946.020298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 16:13:53 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000280)=""/144, 0x90) 16:13:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x4, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:53 executing program 2: r0 = socket$inet(0x2, 0x4000800000000001, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000000)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0xc) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='dec ', 0x0) ftruncate(r1, 0x40007) sendfile(r0, r1, 0x0, 0x2000000000005) 16:13:53 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x6400}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x9, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 946.256935] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 946.287581] device lo left promiscuous mode [ 946.340761] device tunl0 left promiscuous mode [ 946.360697] device gre0 left promiscuous mode 16:13:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x0, {0xfffffffffffffff7}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00', {}, 0x0, [], [], [0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000016c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 946.400370] device gretap0 left promiscuous mode 16:13:53 executing program 2: clone(0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) [ 946.431003] device erspan0 left promiscuous mode [ 946.448474] device ip_vti0 left promiscuous mode [ 946.467176] device ip6_vti0 left promiscuous mode [ 946.485732] device sit0 left promiscuous mode [ 946.510796] input: syz0 as /devices/virtual/input/input15 [ 946.537372] device ip6tnl0 left promiscuous mode [ 946.555451] device ip6gre0 left promiscuous mode [ 946.589395] input: syz0 as /devices/virtual/input/input16 [ 946.609573] device syz_tun left promiscuous mode 16:13:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 946.666395] device ip6gretap0 left promiscuous mode [ 946.703614] device bridge0 left promiscuous mode [ 946.753441] device vcan0 left promiscuous mode [ 946.763054] device ÿ left promiscuous mode [ 946.785874] device team0 left promiscuous mode [ 946.873656] device dummy0 left promiscuous mode [ 946.936231] device nlmon0 left promiscuous mode [ 946.960473] device caif0 left promiscuous mode [ 946.986739] device batadv0 left promiscuous mode [ 946.994738] device vxcan0 left promiscuous mode [ 946.999506] device vxcan1 left promiscuous mode [ 947.024039] device netdevsim4 left promiscuous mode [ 947.038725] device veth0 left promiscuous mode [ 947.054659] device veth1 left promiscuous mode [ 947.068870] device veth0_to_bridge left promiscuous mode [ 947.093569] device veth1_to_bridge left promiscuous mode [ 947.122960] device veth0_to_bond left promiscuous mode [ 947.140097] device bond_slave_0 left promiscuous mode [ 947.160556] device veth1_to_bond left promiscuous mode [ 947.189510] device bond_slave_1 left promiscuous mode [ 947.203475] device veth0_to_team left promiscuous mode [ 947.218545] device team_slave_0 left promiscuous mode [ 947.229801] device veth1_to_team left promiscuous mode [ 947.238621] device team_slave_1 left promiscuous mode [ 947.249871] device veth0_to_hsr left promiscuous mode [ 947.258802] device hsr_slave_0 left promiscuous mode [ 947.269788] device veth1_to_hsr left promiscuous mode [ 947.279142] device hsr_slave_1 left promiscuous mode 16:13:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:13:56 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000380)={0x0, 0x0, 0x400000000000000, 0x3ff}, 0xfffffffffffffef7) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r0, &(0x7f0000000100), 0x15f, 0x10400003) 16:13:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x9, 0x200031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)) 16:13:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:56 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x4000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6800}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:56 executing program 2: r0 = socket$kcm(0x10, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x19ef4b43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0xd, &(0x7f0000000180), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x6f536665dc2c6dd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x1, &(0x7f00000000c0)='\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x2, 0x7, 0x35d9, 0x0, 0x3, 0x1002, 0xa, 0x0, 0x8000, 0x5, 0x2, 0x4, 0x9, 0x0, 0x7fffffff, 0xee, 0xa28, 0x1, 0xfffffffffffffff7, 0x20, 0x8, 0x1ff, 0x5, 0x6, 0xff, 0x2, 0x1ff, 0x0, 0x1000, 0x0, 0x100, 0x5, 0x8001, 0x100, 0x3, 0x0, 0x3f, 0x0, @perf_bp={0x0, 0xb}, 0x20000, 0x5, 0x5382, 0x0, 0x9cc, 0x3, 0x2}, r3, 0x0, r0, 0x2) [ 948.759559] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 948.800262] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x600000000000000, [0x277], [0xc2]}) [ 948.891628] sctp: [Deprecated]: syz-executor2 (pid 13743) Use of int in maxseg socket option. [ 948.891628] Use struct sctp_assoc_value instead 16:13:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x9000, 0x0, 0x0) [ 949.050212] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:56 executing program 2: r0 = socket$kcm(0x10, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x19ef4b43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0xd, &(0x7f0000000180), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x6f536665dc2c6dd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x1, &(0x7f00000000c0)='\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x2, 0x7, 0x35d9, 0x0, 0x3, 0x1002, 0xa, 0x0, 0x8000, 0x5, 0x2, 0x4, 0x9, 0x0, 0x7fffffff, 0xee, 0xa28, 0x1, 0xfffffffffffffff7, 0x20, 0x8, 0x1ff, 0x5, 0x6, 0xff, 0x2, 0x1ff, 0x0, 0x1000, 0x0, 0x100, 0x5, 0x8001, 0x100, 0x3, 0x0, 0x3f, 0x0, @perf_bp={0x0, 0xb}, 0x20000, 0x5, 0x5382, 0x0, 0x9cc, 0x3, 0x2}, r3, 0x0, r0, 0x2) 16:13:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb09906d6b66732e666174000204010002", 0x11}], 0x8008, 0x0) [ 949.100843] device lo entered promiscuous mode [ 949.122811] device tunl0 entered promiscuous mode [ 949.147780] device gre0 entered promiscuous mode [ 949.170477] device gretap0 entered promiscuous mode [ 949.185160] sctp: [Deprecated]: syz-executor2 (pid 13760) Use of int in maxseg socket option. [ 949.185160] Use struct sctp_assoc_value instead [ 949.204115] device erspan0 entered promiscuous mode [ 949.216509] device ip_vti0 entered promiscuous mode [ 949.238362] device ip6_vti0 entered promiscuous mode [ 949.253032] device sit0 entered promiscuous mode [ 949.266810] device ip6tnl0 entered promiscuous mode [ 949.284085] device ip6gre0 entered promiscuous mode [ 949.308043] device syz_tun entered promiscuous mode 16:13:56 executing program 2: 16:13:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d2566732e666174000204010002", 0x11}], 0x8008, 0x0) [ 949.329073] device ip6gretap0 entered promiscuous mode [ 949.335833] device bridge0 entered promiscuous mode [ 949.341184] device vcan0 entered promiscuous mode [ 949.353695] device ÿ entered promiscuous mode [ 949.358819] device bond_slave_0 entered promiscuous mode [ 949.393915] device bond_slave_1 entered promiscuous mode [ 949.406542] device team0 entered promiscuous mode [ 949.411663] device team_slave_0 entered promiscuous mode [ 949.419659] device team_slave_1 entered promiscuous mode 16:13:56 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x900000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 949.455860] device dummy0 entered promiscuous mode [ 949.468801] device nlmon0 entered promiscuous mode [ 949.487566] device caif0 entered promiscuous mode [ 949.507701] device batadv0 entered promiscuous mode 16:13:56 executing program 2: [ 949.534942] device vxcan0 entered promiscuous mode [ 949.567369] device vxcan1 entered promiscuous mode [ 949.579394] device netdevsim4 entered promiscuous mode [ 949.589379] device veth0 entered promiscuous mode [ 949.604767] device veth1 entered promiscuous mode 16:13:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b2e732e666174000204010002", 0x11}], 0x8008, 0x0) [ 949.629437] device veth0_to_bridge entered promiscuous mode [ 949.636079] device veth1_to_bridge entered promiscuous mode [ 949.653099] device veth0_to_bond entered promiscuous mode 16:13:57 executing program 2: [ 949.674551] device veth1_to_bond entered promiscuous mode [ 949.681015] device veth0_to_team entered promiscuous mode [ 949.687093] device veth1_to_team entered promiscuous mode [ 949.695943] device veth0_to_hsr entered promiscuous mode [ 949.701676] device hsr_slave_0 entered promiscuous mode [ 949.707464] device veth1_to_hsr entered promiscuous mode [ 949.741109] device hsr_slave_1 entered promiscuous mode 16:13:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b2f732e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:57 executing program 0: 16:13:57 executing program 5: 16:13:57 executing program 2: 16:13:57 executing program 2: [ 950.087853] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 950.113259] device lo left promiscuous mode 16:13:57 executing program 0: [ 950.154464] device tunl0 left promiscuous mode 16:13:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b662b2e666174000204010002", 0x11}], 0x8008, 0x0) [ 950.182113] device gre0 left promiscuous mode [ 950.186805] device gretap0 left promiscuous mode [ 950.191715] device erspan0 left promiscuous mode [ 950.320994] device ip_vti0 left promiscuous mode [ 950.341957] device ip6_vti0 left promiscuous mode [ 950.358897] device sit0 left promiscuous mode [ 950.377759] device ip6tnl0 left promiscuous mode [ 950.410003] device ip6gre0 left promiscuous mode [ 950.415232] device syz_tun left promiscuous mode [ 950.420210] device ip6gretap0 left promiscuous mode [ 950.425621] device bridge0 left promiscuous mode [ 950.430649] device vcan0 left promiscuous mode [ 950.442296] device ÿ left promiscuous mode [ 950.447172] device team0 left promiscuous mode [ 950.458279] device dummy0 left promiscuous mode [ 950.463366] device nlmon0 left promiscuous mode [ 950.469371] device caif0 left promiscuous mode [ 950.480386] device batadv0 left promiscuous mode [ 950.487626] device vxcan0 left promiscuous mode [ 950.492860] device vxcan1 left promiscuous mode [ 950.497763] device netdevsim4 left promiscuous mode [ 950.504322] device veth0 left promiscuous mode 16:13:57 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x3000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:57 executing program 5: 16:13:57 executing program 2: 16:13:57 executing program 0: 16:13:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b666c2e666174000204010002", 0x11}], 0x8008, 0x0) [ 950.509211] device veth1 left promiscuous mode [ 950.514172] device veth0_to_bridge left promiscuous mode [ 950.520012] device veth1_to_bridge left promiscuous mode [ 950.532408] device veth0_to_bond left promiscuous mode [ 950.538026] device bond_slave_0 left promiscuous mode [ 950.550062] device veth1_to_bond left promiscuous mode [ 950.601237] device bond_slave_1 left promiscuous mode [ 950.627389] device veth0_to_team left promiscuous mode [ 950.642404] device team_slave_0 left promiscuous mode [ 950.647774] device veth1_to_team left promiscuous mode [ 950.712413] device team_slave_1 left promiscuous mode 16:13:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:58 executing program 2: 16:13:58 executing program 5: 16:13:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66232e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:58 executing program 0: [ 950.736716] device veth0_to_hsr left promiscuous mode [ 950.753543] device hsr_slave_0 left promiscuous mode [ 950.762499] device veth1_to_hsr left promiscuous mode [ 950.767835] device hsr_slave_1 left promiscuous mode 16:13:58 executing program 0: 16:13:58 executing program 2: [ 950.952588] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:58 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x3f000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:58 executing program 5: 16:13:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66692e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:58 executing program 0: 16:13:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:58 executing program 2: 16:13:58 executing program 2: 16:13:58 executing program 5: [ 951.392228] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:58 executing program 0: 16:13:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b662a2e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:58 executing program 5: [ 951.683031] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:59 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x6e01}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:13:59 executing program 2: 16:13:59 executing program 0: 16:13:59 executing program 5: 16:13:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66302e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:59 executing program 2: 16:13:59 executing program 5: 16:13:59 executing program 0: [ 952.388251] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:13:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:13:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b666f2e666174000204010002", 0x11}], 0x8008, 0x0) 16:13:59 executing program 0: [ 952.657695] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:00 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:00 executing program 2: 16:14:00 executing program 5: 16:14:00 executing program 0: 16:14:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe00000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66642e666174000204010002", 0x11}], 0x8008, 0x0) [ 953.358941] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:00 executing program 5: 16:14:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:00 executing program 0: 16:14:00 executing program 2: [ 953.505189] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 953.533560] device lo entered promiscuous mode 16:14:00 executing program 5: 16:14:00 executing program 0: [ 953.553430] device tunl0 entered promiscuous mode [ 953.561133] device gre0 entered promiscuous mode [ 953.604159] device gretap0 entered promiscuous mode [ 953.688775] device erspan0 entered promiscuous mode [ 953.757197] device ip_vti0 entered promiscuous mode [ 953.792683] device ip6_vti0 entered promiscuous mode [ 953.799664] device sit0 entered promiscuous mode [ 953.820423] device ip6tnl0 entered promiscuous mode [ 953.827586] device ip6gre0 entered promiscuous mode [ 953.834840] device syz_tun entered promiscuous mode [ 953.842439] device ip6gretap0 entered promiscuous mode [ 953.849792] device bridge0 entered promiscuous mode [ 953.856671] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 953.864478] device vcan0 entered promiscuous mode [ 953.870084] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 953.877385] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 953.884732] device ÿ entered promiscuous mode [ 953.889479] device bond_slave_0 entered promiscuous mode [ 953.895667] device bond_slave_1 entered promiscuous mode [ 953.903297] 8021q: adding VLAN 0 to HW filter on device ÿ [ 953.910483] device team0 entered promiscuous mode [ 953.916115] device team_slave_0 entered promiscuous mode [ 953.922283] device team_slave_1 entered promiscuous mode [ 953.928851] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 953.935424] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.943604] device dummy0 entered promiscuous mode [ 953.950582] device nlmon0 entered promiscuous mode [ 954.005916] device caif0 entered promiscuous mode [ 954.011176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 954.033862] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 954.045006] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 954.101945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 16:14:01 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66702e666174000204010002", 0x11}], 0x8008, 0x0) 16:14:01 executing program 5: 16:14:01 executing program 2: 16:14:01 executing program 0: 16:14:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:01 executing program 0: 16:14:01 executing program 2: [ 954.413288] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:01 executing program 5: 16:14:01 executing program 0: 16:14:01 executing program 2: 16:14:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b662d2e666174000204010002", 0x11}], 0x8008, 0x0) [ 954.739851] device batadv0 entered promiscuous mode [ 954.768032] device vxcan0 entered promiscuous mode [ 954.790627] device vxcan1 entered promiscuous mode [ 954.805015] device netdevsim4 entered promiscuous mode [ 954.816527] device veth0 entered promiscuous mode [ 954.821700] device veth1 entered promiscuous mode [ 954.829883] device veth0_to_bridge entered promiscuous mode [ 954.855585] device veth1_to_bridge entered promiscuous mode [ 954.872281] device veth0_to_bond entered promiscuous mode [ 954.878790] device veth1_to_bond entered promiscuous mode [ 954.906271] device veth0_to_team entered promiscuous mode [ 954.922711] device veth1_to_team entered promiscuous mode [ 954.929207] device veth0_to_hsr entered promiscuous mode [ 954.946026] device hsr_slave_0 entered promiscuous mode [ 954.952136] device veth1_to_hsr entered promiscuous mode [ 954.975105] device hsr_slave_1 entered promiscuous mode 16:14:02 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x6400000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:02 executing program 0: 16:14:02 executing program 5: 16:14:02 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66782e666174000204010002", 0x11}], 0x8008, 0x0) 16:14:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:02 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) write$P9_RVERSION(r0, 0x0, 0x7) [ 955.433785] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:02 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x0, {0xb6}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000016c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 16:14:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:02 executing program 0: sched_setscheduler(0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x30, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0063404000d9003e25ea9f0000000000000000004700000000ff0000000075b067b9b5462a091e973c0000000001ff01"], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 955.609545] device lo left promiscuous mode 16:14:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66632e666174000204010002", 0x11}], 0x8008, 0x0) [ 955.652099] device tunl0 left promiscuous mode 16:14:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x11, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0063404000d9003e25", @ANYPTR], 0x0, 0x0, 0x0}) [ 955.680731] device gre0 left promiscuous mode [ 955.686920] device gretap0 left promiscuous mode [ 955.688215] binder: 14033:14037 got transaction to invalid handle [ 955.696765] device erspan0 left promiscuous mode [ 955.719726] device ip_vti0 left promiscuous mode [ 955.756375] input: syz0 as /devices/virtual/input/input17 [ 955.767130] device ip6_vti0 left promiscuous mode [ 955.790955] device sit0 left promiscuous mode [ 955.803420] binder: 14043:14048 got transaction to invalid handle [ 955.817309] binder: 14033:14037 transaction failed 29201/-22, size 260233365802-33489152 line 2896 [ 955.819765] device ip6tnl0 left promiscuous mode [ 955.849214] binder: 14043:14048 transaction failed 29201/-22, size 0-0 line 2896 [ 955.857381] device ip6gre0 left promiscuous mode [ 955.869639] device syz_tun left promiscuous mode [ 955.875484] device ip6gretap0 left promiscuous mode [ 955.884485] binder: 14033:14044 got transaction to invalid handle [ 955.892063] binder: undelivered TRANSACTION_ERROR: 29201 [ 955.901338] binder: 14033:14044 transaction failed 29201/-22, size 260233365802-33489152 line 2896 [ 955.905470] device bridge0 left promiscuous mode [ 955.940181] device vcan0 left promiscuous mode [ 955.942820] binder: undelivered TRANSACTION_ERROR: 29201 [ 955.948358] device ÿ left promiscuous mode [ 955.953252] binder: undelivered TRANSACTION_ERROR: 29201 [ 955.960792] device team0 left promiscuous mode [ 955.980727] device dummy0 left promiscuous mode [ 955.986116] device nlmon0 left promiscuous mode [ 955.991229] device caif0 left promiscuous mode [ 956.004382] device batadv0 left promiscuous mode [ 956.009523] device vxcan0 left promiscuous mode [ 956.024533] device vxcan1 left promiscuous mode [ 956.029772] device netdevsim4 left promiscuous mode [ 956.041071] device veth0 left promiscuous mode [ 956.048667] device veth1 left promiscuous mode [ 956.058456] device veth0_to_bridge left promiscuous mode [ 956.076554] device veth1_to_bridge left promiscuous mode [ 956.085507] device veth0_to_bond left promiscuous mode [ 956.091125] device bond_slave_0 left promiscuous mode [ 956.101012] device veth1_to_bond left promiscuous mode [ 956.109247] device bond_slave_1 left promiscuous mode [ 956.119121] device veth0_to_team left promiscuous mode [ 956.127221] device team_slave_0 left promiscuous mode [ 956.137715] device veth1_to_team left promiscuous mode [ 956.145907] device team_slave_1 left promiscuous mode [ 956.151423] device veth0_to_hsr left promiscuous mode [ 956.163304] device hsr_slave_0 left promiscuous mode [ 956.168636] device veth1_to_hsr left promiscuous mode [ 956.174365] device hsr_slave_1 left promiscuous mode 16:14:03 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66252e666174000204010002", 0x11}], 0x8008, 0x0) 16:14:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:03 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40000, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) [ 956.382356] validate_nla: 1 callbacks suppressed [ 956.382367] netlink: 'syz-executor5': attribute type 16 has an invalid length. 16:14:03 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x40000, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000140)={0x6, 0xdc, 0x2, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10001, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r4 = dup2(r2, r0) flock(r2, 0x8) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000180)) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'veth1_to_bridge\x00', 0x400}) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:14:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b662e2e666174000204010002", 0x11}], 0x8008, 0x0) 16:14:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:04 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x40000, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000140)={0x6, 0xdc, 0x2, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10001, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r4 = dup2(r2, r0) flock(r2, 0x8) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000180)) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'veth1_to_bridge\x00', 0x400}) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:14:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66752e666174000204010002", 0x11}], 0x8008, 0x0) 16:14:04 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x300000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66582e666174000204010002", 0x11}], 0x8008, 0x0) [ 961.144423] device batadv0 entered promiscuous mode [ 961.149571] device vxcan0 entered promiscuous mode [ 961.154650] device vxcan1 entered promiscuous mode [ 961.159643] device netdevsim5 entered promiscuous mode [ 961.165132] device veth0 entered promiscuous mode [ 961.170050] device veth1 entered promiscuous mode [ 961.175079] device veth0_to_bridge entered promiscuous mode [ 961.180930] device veth1_to_bridge entered promiscuous mode [ 961.186932] device veth0_to_bond entered promiscuous mode 16:14:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732f666174000204010002", 0x11}], 0x8008, 0x0) 16:14:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(r1, 0x8) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(r1) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x3, 0x2, &(0x7f0000000240)=[{&(0x7f0000000200)="50e21cc5023010e2d4602b25fbd906d40360197017e594fc3108a38a6c17896d780c5fa98470e0c4330eb9fcaff32df738ba875a2ed7eb2b41630127a8", 0x3d, 0x8}, {&(0x7f00000005c0)="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", 0x1000, 0x100}], 0x10, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"]) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x9344b52016ef5d80) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000080)={0x2, 0x100000000, 0x5000000}) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:08 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 961.192821] device veth1_to_bond entered promiscuous mode [ 961.198491] device veth0_to_team entered promiscuous mode [ 961.204337] device veth1_to_team entered promiscuous mode [ 961.210008] device veth0_to_hsr entered promiscuous mode [ 961.215682] device hsr_slave_0 entered promiscuous mode [ 961.221124] device veth1_to_hsr entered promiscuous mode [ 961.226771] device hsr_slave_1 entered promiscuous mode [ 961.232442] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 961.341133] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 961.380201] netlink: 'syz-executor5': attribute type 16 has an invalid length. 16:14:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e2e6174000204010002", 0x11}], 0x8008, 0x0) 16:14:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc3}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) getpeername(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000140)=0x80) r3 = dup2(r2, r0) sendmmsg(r3, &(0x7f0000002e80)=[{{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @empty}, 0x1, 0x1, 0x1, 0x4}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)='_', 0x1}, {&(0x7f0000000240)="60d1929f40e626615918e460ddeaa3bdffa2c2697038cd7fc9223c4bf390a77ec499da27b260eed70d8875f56b434b73278bcb6d3b17e9730c7e97fbdfa8a5c54853b46aff380fa529ef2635e8bcdf24ea26e307f69a624338f120460d357322aa219149c4de9f9ab19d1fdf93abdbaef9d148a97189d08488c121fc34d9cc27213e83e69977e187d4b1e88441cfd64c71dfb98041446c6eb8edc2c72abaff213907966e38f00e1b3452a64d956cd378203256551dcd5ec1f108c46739aee97bab35da816cdf78f32d85ba8f1d7995e125e7fdb30c6e89c12291cfd702227f98f25f0302fff55786a77c3d9a4f9e8c8ec6", 0xf1}, {&(0x7f0000000380)="af8eb9a746f67e6a231240fd39f766ef63f6a894bf96d4b9d940880137f947deeb4607c29b0c7f0cda20d4776ec8348cb03cb5ae1104dd38600fdc13069742b4105d60f8dca8f14239d9a9ddb91386139187126820dfdc952c231d891eaa0672f2f20825fa260d0367fe2f83d4408c3649419a4d141f09f85b4dbfae1ddb6f4e6736de66574208ec001480198390876790c2e979c194698fe6f267ba292ffbac31965e544e214a05d1b52a81139371ffc80fdc8e2e128f8969d925df1dd6aefb27a939913b0562d2c6194bebe29d16a789c08b", 0xd3}, {&(0x7f0000000480)="8981fe26b7add5a6", 0x8}, {&(0x7f0000000780)="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", 0x1000}], 0x5, &(0x7f0000001780)=[{0xc0, 0x10d, 0x4, "5ae3f82244212d52cc6afc1818921a973f0e60509ffec96b4fcbacd35b45b3f53f9a188fff4642da990bb3a4e99f82ad455c64dfe4e74e896c33d230e1b89cbbd6dfe5f9b9a7ac14614fba33261d7066507c6bb95a1d1dc2ffde39815a7d14f18363b941f11b0627961f8c7c9c197617404e7f981c9a2f0b584c05a3501028344049f33c2e10f2533ccda259f82cc876305055be4b77249d2f6a1cc8dea0346f929de89186d30e4098097404a8112d82"}, {0x60, 0x111, 0x2, "d3021c0ff59f242553b2c12735aabf40971332fcae2f5c99c80deda41d8e91488058bfb7d9e64a90f59440742423cf157fce72511c0004a30322fec4c406c93c4ffb21ba047eafdf8a946c2ac498"}, {0x108, 0x19e, 0x9, "4014df1eabb00cc48ed37c80c9f235bfaa12d4c82565c0c2023f40348ab8a748066a3cbca7def0f3baf1a1ff77ef4b1d5e54f957bd917775b05d6233b25ffdbe099a7a0879e52b3109966d3cebcf654f04d721c96dc8630ca4a83c013f53e4b8643b431f88e30668938841df1b12fd47a67ab763992f35e9a988d850abbd9a0fcb3e5d044facc1434eaa62dd944744d96888e87b424aedb2f654e56e45a4c297b236bbf2fc13e4753e005f29b461c86e260354f519753c3bae7a21013cd3f7d0064a8578ff2908407acd6d5821868f231195bb42c75cf4eb1a8a33047ffe0c211ab423e3a5a1f41a920cee9b9fe4337cd142ae"}, {0x68, 0x1, 0x10000000100, "561aa18c26ac40ea40a1a5f93db2710fa21a3ecb685e23623e4f57b667bf7be7246394fa52276c7a472eb491877cef456d39b6c15265926d61c73fc870d92be3a6201b4fca4297cf89890dbd16aa8242df37ec"}, {0xd0, 0x11f, 0x100000000, "51589d7b9b57e3e3ffa715dc2b3b87f0071635873b80f1e12ff50324976c5f16a14644af2f91b654b67752bf5309e0e860be10b359ff009ff7854be8597bcb472f0b4669d1ffe6b4b3b95e51118990808eb517a07734fae409560eac411f188d4cd6af624a301026e0f89dc245a283016c43449da87645da9a3632ebace425d28c4ef9c6a2688f92f528f5bbed1aa59d2cc08f03ee49ab164e31b6fcc6674af3980bc030e3f416208900d9e22339de3d9870fd3ec14aa0152d31ab874bc01d"}, {0x58, 0x1, 0x1, "33aa79209abd9648335794a97ab4097403f3114e864c72e0761e52044655a83e1bce1a51f5bd2d6e508a932a9ec256bf5598f7803a8d163fa4f79f800bc916229568d656db9efe91"}, {0xd0, 0x10f, 0x1, "1b2f42e1a815ad77879e4f35284cc1b50ee110730479f60f2d50bfee3180cba57f3bea7ecefbfb82bf4f0576184fb8b0bd8770f06c0c86bcb5b84bf0f6d9e73518f12308d09433b2757ca15ec1b9a8dc7608c21524275a1fe540db643efded6f07e5d1abcf20d9e5ec50ad6383b174359a971b2771bd3f6b64ff42c9b01bf2ced18fe39d8cea4465b6b8d21aa227cf7202a3f86eb90cfd04dbc41c6b0e78d90b2c79590a05c81fc5516db2aae87473e33fac3865702919e5b81d"}], 0x488}, 0x8}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)="84e3d23cc8264cf7b7666821f5f1f1e97d70b8734b579c704aca417b5b3b365fd2688e3d043a40dd948abdf61ae378dc6df60bb61b67302dab1de89042d023cdb22313a423880d2204fcb6224d89910a21718587a36b446f517717034cdd6a9981c18fa1916f30f6db78f441a4c2ff0dad7b4547a2c39dd2ba88e4d24d7cd9c88de7a7dd9f98b7f206d20423bd08f83a3e58d0b4a356ab9662e550143c8caa085ad457ecd639f752b7fd50f74fef4690bb837ad8e68b4833af6b0bf001e2c7266eda8e3e5119b2fb2802", 0xca}, {&(0x7f0000000640)="511d99b52c61795f9bc228294e68ee8b8fefcf1d1c562d1401a41509d1be7b8e2de69c4fa370960b2c08e8ddd42057091238875e37cb81744b13439aea18f3f00a67ed5988d21ce7de747dadb42ccf6ce989fdaaad54ad8a6ce19d492ced", 0x5e}, {&(0x7f0000001c40)="d4a65d112ad9dd1a6772891cd67e14f51f9d7655a207b60b7378615696082a00676b010ab7bd1ed7928225f80d04a99afb718140c38acdf914828b209168f90a0bd8ea0b54ba3f53c6ef4c736f747b31d93fb2a41bc5536cdac068225f3aadec7b6b55b41bea7e89e6f256c38d2052ffeaa150ebcf5752f38cd4e3249a5ff54c00af8250e3843c962828d382a2cf323a6e148cb7053928eb", 0x98}], 0x3, &(0x7f0000001d00)=[{0x1010, 0x101, 0x100000001, "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"}, {0x88, 0x100, 0x54b, "05c95027b49cb19518d5b8362b5c304f3a661a9918b3d5ed5f89692a96050958a2fb16e60090945cf98d056c4ff2a95c5aca093403e7f3847df131c2738e0de873377808cce090a0a734522b1bfd7ac25f94e1753456bbe895393412abe0d1bd9f10b62119b2a19c26245cab7ea2c25360"}, {0xb0, 0x0, 0x6, "3f4760e92fce7beef2d8f792aad0a81dee16b15b7ad90f68d26ce30256da07dccb5c7f763dc215af37dedac18aa28ffe1e02237ab82cdf2a79161cb6ed81edf8303874bebb670e68732af40e20cc1d931e461ea9052bef95cf6fb350ca17756a8d3bd9c728b975242882a032ca18d427eadbac2ecf4c2c0d529bd6bde4c7ebbbc3f1b7b7889ee8c94753421c89f5cd49c11a76e9dd296ffce4"}], 0x1148}, 0x1}], 0x2, 0x4000) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) [ 961.553449] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e2f6174000204010002", 0x11}], 0x8008, 0x0) [ 961.872145] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:09 executing program 5: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e662574000204010002", 0x11}], 0x8008, 0x0) [ 962.174684] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2, 0x0) getsockname$tipc(r2, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:09 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:09 executing program 5: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 962.519894] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666125000204010002", 0x11}], 0x8008, 0x0) 16:14:10 executing program 5: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 962.763220] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174004004010002", 0x11}], 0x8008, 0x0) [ 963.018525] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 963.099879] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000580)='/dev/dsp#\x00', 0x9, 0x40000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x88, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl='posixacl'}, {@loose='loose'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x40000, 0x4a) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000000940)={@remote={[], 0x3}, 0xe, 'vlan0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) lsetxattr$security_selinux(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.selinux\x00', &(0x7f0000000500)='system_u:object_r:ifconfig_exec_t:s0\x00', 0x25, 0x3) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0xe7dd, 0x4, &(0x7f0000000400)=[{&(0x7f00000001c0)="7ba8e6fff2e8b30f6c417e179cbd422d5cf799e865d5496803a0c78a6114c50b456988b41a269fd90b62d4c4778bd615127019c62e3b08d1ab59ceb820f84f1bf109fe59819655075d57beae79550948789efdae8f7ae76822e3daba19e6d8d2a6f62cc5c32e171898f00c897696dc76cf7dded8907f983b8580a59655671eb5", 0x80}, {&(0x7f0000000240)="a2cc97733c4a80a354905ca4d977e57a304608f2c5e50c5af213deb3353cd1016406a4156532b3da9fcb790ab8395d1ccb501274d670d2192c7321128b94305df003217a9feda8d574230cdd2f69efaf532c83d7a57acb27", 0x58, 0x7f}, {&(0x7f00000002c0)="6e507695dacd98961802fd5bfdd84c04602f41d0a7948d96083875a0df09ce458f93fba50b4ea9f010c05408023c3ecb3ad0e8c62b84a5df2c368b1ab44f20debedd5430b7074958e6b70d9f18fa398e2dfbbdfa25daefbb232ed7040798847af570be2a63af3f09dbb8dfa4f599592e229a9b1ec7e5ec231c51252b299df75be72ca39e9b9a032c234e2f0c6592fff3c3", 0x91, 0x8}, {&(0x7f0000000380)="bef26127932a620623c24d373cc08373845f593e88214e95ea457a2e2e446b2c9aa58212b0936df1892e08383369f930819257c26c3814278613dc9e721b4278986974f1279dd887f8a0c472d9", 0x4d, 0x2}], 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"]) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x30, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740)='/dev/autofs\x00', 0x40, 0x0) ioctl$NBD_SET_TIMEOUT(r7, 0xab09, 0x7) shmctl$IPC_STAT(0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, r7, 0x0, 0x4, &(0x7f00000005c0)='!^\t\x00', 0xffffffffffffffff}, 0x30) ioctl$KDGETLED(r7, 0x4b31, &(0x7f0000000640)) ptrace$peekuser(0x3, r8, 0x9) 16:14:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174001f04010002", 0x11}], 0x8008, 0x0) [ 963.354328] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:10 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000100)=0x6a71153, 0x4) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000a40)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000001c0)="e3f3a82d94335daf0e884d6b603e88f6d59b9f7e8d94f6b339f41036d3032962be4e3bf0ed9440ec33624b7abacd2a61391f470e48616ef1fad5570791fd56945921bb209b021d519b0e31dcf0a80c2e1b1a2f96cdad6de4f959ca3a16c039500affc09504c2", 0x66}, {&(0x7f0000000240)="5f0812d6d265", 0x6}, {&(0x7f0000000280)="32b0b0a104462cdf2c079b7e116d7e9155c8d43939f3a355b7a7875568419250206c090d496768056cb5eca8fe90f0a7cc1052d1568a581e4820bf8c50c24975f56fe55b1fefd98a76f5ff858a85100210d35f6058b61052da23c390d7f6a0696232e7e2d50e90a5ca9c8068a7f7276b14ad8098a67603ef9111c663ac66866c28741a1c91c9fbf053c98066f73fc6590a2025d76de4574b57f88e5fa90ed4235d70225c", 0xa4}], 0x3, &(0x7f00000003c0)=[@rights={0x20, 0x1, 0x1, [r1, r4, r3, r4]}, @rights={0x28, 0x1, 0x1, [r0, r4, r0, r2, r1]}, @rights={0x18, 0x1, 0x1, [r4]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x38, 0x1, 0x1, [r2, r2, r3, r3, r3, r0, r1, r4, r4]}], 0xb0}, {&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000500)="6b84280fbdadb41d67e24ee0b5a403020b2f594d5cc247598adfb7d01a653b20541ab9ae4b92fa4b25d1cda6636d22f742924d43e93a8ecee2", 0x39}, {&(0x7f0000000540)="f7b85467dd1b75ee3633ac25ebdf5828097817", 0x13}, {&(0x7f0000000580)="1d5db435a0fb15ff18549183e0e2915a55d185a8994591ef1c84e736fa44fb3ce18ee506514cbfcd47df3bf9904cb7427fe68c22de04b67c6bbae1d091e6eea11c193ca2d76a99c38823597feb4e04aaf18eb41df4e2bf83334ba88d3c4c7fd2f9f32a5d0f177bdb6bf3198a05526db8315365406454fca4c4a9ed22ac23cec19b64987d8b784cdc893a4e1d59486a44a466940224fd1601c3788f66f04fbcee99e0d7153fceb7ec1b17491d67bb8ed76406cd0fee779ad48fd6f7831f8fb7f8191ec2f7a2c5533ae6784374f33ff3f8c39a398f2492d345ace2315484832f9d7b279f45685252b7cf233bbc8ede18de94", 0xf1}], 0x3, &(0x7f00000006c0)=[@rights={0x18, 0x1, 0x1, [r4]}, @rights={0x18, 0x1, 0x1, [r4]}, @rights={0x18, 0x1, 0x1, [r4, r1]}, @rights={0x38, 0x1, 0x1, [r1, r0, r2, r3, r3, r2, r2, r0, r0]}], 0x80, 0x800}, {&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000800)="6d2df165c7500ccf761b82895b09f44722b020ce4ab1b9c04fc84df5274bb9a3246a4bd2785ef6407372a394c0", 0x2d}, {&(0x7f0000000840)="50d8e6a2f5e0beea05107d8ea76ad8bf09bdd0b8904c20df3352a93bb0e93a3f6c42e9b9f46884549a0762f6e52ef07d0d6ba1148ec0d14f5942db9c6c1d89123f36a0d58981bd846135308ff378c69668bbb756bffb70e1c6", 0x59}, {&(0x7f00000008c0)="6196c6464bc5261d40c52cb03417e4742772417b1861424614db2f2c68cf8511eb68c0b9e4117410bae08faf47d5", 0x2e}, {&(0x7f0000000900)="333e4acd2f4120dd2a9919c8977c51a4c8952d9908974e1dd20fc1fb95d1beb4bb11f8d3d4ff324c3d0927b98690874df359aee255357d168306f2bd10f439131f88c5bcece360547c2d4cf148ec12fdae971ad4d19b145c09e25a125f5511573e87635b19687536", 0x68}, {&(0x7f0000000980)="af86fcfa1a132b12cc2ee262d5e450149d27a7448fd61fa3ade15cc685873b13bc8bb917d3395af443f0f4cbfd8b88", 0x2f}], 0x5, 0x0, 0x0, 0x20000000}], 0x3, 0x40) dup2(r2, r0) write$binfmt_misc(r2, 0x0, 0x23d) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) 16:14:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:11 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x6e010000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 963.777591] hfsplus: unable to parse mount options 16:14:11 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) ioctl$sock_netdev_private(r1, 0x89f6, &(0x7f0000000180)="3dc8ef59155936690e98b098f423edbb0c39788e609b3cc0aac50f15d5fc6b9e0d96d2066e6904bff2cd40c8a362ada929f5d10c52506b79338ced11ab3515be1b92e5464c80b141d498a46babe8f52988ccc4087a8c089de52727b1d2d2770640cfb1e9c1206db6b37a47505730e9a762ba57b56c21c1a5b720f6fd8fc63663b20dcdcf08597ecfd778d3028fe45845ec10be470c0464c13f3f160529b13e4de9ea3e6195dc35622de3480be0038bf33efee531989feffd3ae02d4b792a87665c03e44d1dbd449704f8f957fcef6e133d9b80891c4eb401008a4c83f00d374a61c0fb29b552dd1744fbcbd86384cfa111") 16:14:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174040204010002", 0x11}], 0x8008, 0x0) [ 963.852818] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 964.118820] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000580)='/dev/dsp#\x00', 0x9, 0x40000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x88, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl='posixacl'}, {@loose='loose'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x40000, 0x4a) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000000940)={@remote={[], 0x3}, 0xe, 'vlan0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) lsetxattr$security_selinux(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.selinux\x00', &(0x7f0000000500)='system_u:object_r:ifconfig_exec_t:s0\x00', 0x25, 0x3) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0xe7dd, 0x4, &(0x7f0000000400)=[{&(0x7f00000001c0)="7ba8e6fff2e8b30f6c417e179cbd422d5cf799e865d5496803a0c78a6114c50b456988b41a269fd90b62d4c4778bd615127019c62e3b08d1ab59ceb820f84f1bf109fe59819655075d57beae79550948789efdae8f7ae76822e3daba19e6d8d2a6f62cc5c32e171898f00c897696dc76cf7dded8907f983b8580a59655671eb5", 0x80}, {&(0x7f0000000240)="a2cc97733c4a80a354905ca4d977e57a304608f2c5e50c5af213deb3353cd1016406a4156532b3da9fcb790ab8395d1ccb501274d670d2192c7321128b94305df003217a9feda8d574230cdd2f69efaf532c83d7a57acb27", 0x58, 0x7f}, {&(0x7f00000002c0)="6e507695dacd98961802fd5bfdd84c04602f41d0a7948d96083875a0df09ce458f93fba50b4ea9f010c05408023c3ecb3ad0e8c62b84a5df2c368b1ab44f20debedd5430b7074958e6b70d9f18fa398e2dfbbdfa25daefbb232ed7040798847af570be2a63af3f09dbb8dfa4f599592e229a9b1ec7e5ec231c51252b299df75be72ca39e9b9a032c234e2f0c6592fff3c3", 0x91, 0x8}, {&(0x7f0000000380)="bef26127932a620623c24d373cc08373845f593e88214e95ea457a2e2e446b2c9aa58212b0936df1892e08383369f930819257c26c3814278613dc9e721b4278986974f1279dd887f8a0c472d9", 0x4d, 0x2}], 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"]) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x30, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740)='/dev/autofs\x00', 0x40, 0x0) ioctl$NBD_SET_TIMEOUT(r7, 0xab09, 0x7) shmctl$IPC_STAT(0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, r7, 0x0, 0x4, &(0x7f00000005c0)='!^\t\x00', 0xffffffffffffffff}, 0x30) ioctl$KDGETLED(r7, 0x4b31, &(0x7f0000000640)) ptrace$peekuser(0x3, r8, 0x9) 16:14:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e6661744c0204010002", 0x11}], 0x8008, 0x0) 16:14:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xadb7, 0x101000) mkdirat(r1, &(0x7f0000000140)='./file0\x00', 0x100) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r4 = dup2(r3, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) open_by_handle_at(r4, &(0x7f0000000180)={0xc, 0x2, "a5c7bc60"}, 0x18000) 16:14:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xadb7, 0x101000) mkdirat(r1, &(0x7f0000000140)='./file0\x00', 0x100) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r4 = dup2(r3, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) open_by_handle_at(r4, &(0x7f0000000180)={0xc, 0x2, "a5c7bc60"}, 0x18000) [ 964.993433] hfsplus: unable to parse mount options 16:14:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:15 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xadb7, 0x101000) mkdirat(r1, &(0x7f0000000140)='./file0\x00', 0x100) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) r4 = dup2(r3, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) open_by_handle_at(r4, &(0x7f0000000180)={0xc, 0x2, "a5c7bc60"}, 0x18000) 16:14:15 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e6661746c0204010002", 0x11}], 0x8008, 0x0) 16:14:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000580)='/dev/dsp#\x00', 0x9, 0x40000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x88, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl='posixacl'}, {@loose='loose'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x40000, 0x4a) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000000940)={@remote={[], 0x3}, 0xe, 'vlan0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) lsetxattr$security_selinux(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.selinux\x00', &(0x7f0000000500)='system_u:object_r:ifconfig_exec_t:s0\x00', 0x25, 0x3) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0xe7dd, 0x4, &(0x7f0000000400)=[{&(0x7f00000001c0)="7ba8e6fff2e8b30f6c417e179cbd422d5cf799e865d5496803a0c78a6114c50b456988b41a269fd90b62d4c4778bd615127019c62e3b08d1ab59ceb820f84f1bf109fe59819655075d57beae79550948789efdae8f7ae76822e3daba19e6d8d2a6f62cc5c32e171898f00c897696dc76cf7dded8907f983b8580a59655671eb5", 0x80}, {&(0x7f0000000240)="a2cc97733c4a80a354905ca4d977e57a304608f2c5e50c5af213deb3353cd1016406a4156532b3da9fcb790ab8395d1ccb501274d670d2192c7321128b94305df003217a9feda8d574230cdd2f69efaf532c83d7a57acb27", 0x58, 0x7f}, {&(0x7f00000002c0)="6e507695dacd98961802fd5bfdd84c04602f41d0a7948d96083875a0df09ce458f93fba50b4ea9f010c05408023c3ecb3ad0e8c62b84a5df2c368b1ab44f20debedd5430b7074958e6b70d9f18fa398e2dfbbdfa25daefbb232ed7040798847af570be2a63af3f09dbb8dfa4f599592e229a9b1ec7e5ec231c51252b299df75be72ca39e9b9a032c234e2f0c6592fff3c3", 0x91, 0x8}, {&(0x7f0000000380)="bef26127932a620623c24d373cc08373845f593e88214e95ea457a2e2e446b2c9aa58212b0936df1892e08383369f930819257c26c3814278613dc9e721b4278986974f1279dd887f8a0c472d9", 0x4d, 0x2}], 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"]) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x30, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740)='/dev/autofs\x00', 0x40, 0x0) ioctl$NBD_SET_TIMEOUT(r7, 0xab09, 0x7) shmctl$IPC_STAT(0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, r7, 0x0, 0x4, &(0x7f00000005c0)='!^\t\x00', 0xffffffffffffffff}, 0x30) ioctl$KDGETLED(r7, 0x4b31, &(0x7f0000000640)) ptrace$peekuser(0x3, r8, 0x9) 16:14:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:15 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000140)=0xc) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:14:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174030204010002", 0x11}], 0x8008, 0x0) 16:14:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r2 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'ip6gretap0\x00', 0x8000}) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="285474dae6badf3a960eca58356ed2eb", 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000080)) 16:14:16 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r2 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'ip6gretap0\x00', 0x8000}) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="285474dae6badf3a960eca58356ed2eb", 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000080)) 16:14:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174001404010002", 0x11}], 0x8008, 0x0) [ 969.568463] validate_nla: 2 callbacks suppressed [ 969.568475] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 970.276206] IPVS: ftp: loaded support on port[0] = 21 [ 971.219368] device bridge_slave_1 left promiscuous mode [ 971.225639] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.294882] device bridge_slave_0 left promiscuous mode [ 971.300331] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.962097] team0 (unregistering): Port device team_slave_1 removed [ 974.973003] team0 (unregistering): Port device team_slave_0 removed [ 974.984062] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 975.056150] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 975.134744] bond0 (unregistering): Released all slaves [ 975.475902] chnl_net:caif_netlink_parms(): no params data found [ 975.880835] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.893709] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.901186] device bridge_slave_0 entered promiscuous mode [ 975.974154] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.980696] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.997686] device bridge_slave_1 entered promiscuous mode [ 976.141518] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 976.210837] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 976.356372] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 976.364213] team0: Port device team_slave_0 added [ 976.410207] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 976.417745] team0: Port device team_slave_1 added [ 976.486969] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 976.556253] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 976.777458] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 976.810552] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 977.229654] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 977.902616] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.932586] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.994125] team0 (unregistering): Port device team_slave_1 removed [ 978.006255] team0 (unregistering): Port device team_slave_0 removed [ 978.016973] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 978.055846] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 978.135349] bond0 (unregistering): Released all slaves [ 979.230806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.469186] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 979.652325] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 979.658483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 979.674798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 979.823012] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 979.829125] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.986405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 979.994248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 980.003526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 980.011230] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.017676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.026501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 980.169484] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 980.176556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 980.187808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 980.195726] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.202157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.297430] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 980.304420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 980.410351] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 980.418329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 980.525455] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 980.532544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 980.540545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 980.548478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 980.650003] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 980.657001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 980.668738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 980.775238] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 980.782356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 980.790582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 980.896265] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 980.903785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 980.912096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 981.534802] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 981.782280] 8021q: adding VLAN 0 to HW filter on device batadv0 16:14:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r2 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'ip6gretap0\x00', 0x8000}) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="285474dae6badf3a960eca58356ed2eb", 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000080)) 16:14:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000304010002", 0x11}], 0x8008, 0x0) 16:14:29 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:29 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000140)=0xc) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:14:29 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r3 = dup2(r2, r0) write$binfmt_misc(r1, 0x0, 0xffffffffffffffcc) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x6) write$apparmor_exec(r3, &(0x7f00000000c0)={'stack ', 'system\x00'}, 0xd) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) [ 982.101213] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:29 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r3 = dup2(r2, r0) write$binfmt_misc(r1, 0x0, 0xffffffffffffffcc) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x6) write$apparmor_exec(r3, &(0x7f00000000c0)={'stack ', 'system\x00'}, 0xd) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) 16:14:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174740204010002", 0x11}], 0x8008, 0x0) [ 982.347503] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:29 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r3 = dup2(r2, r0) write$binfmt_misc(r1, 0x0, 0xffffffffffffffcc) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x6) write$apparmor_exec(r3, &(0x7f00000000c0)={'stack ', 'system\x00'}, 0xd) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x3) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) 16:14:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174070204010002", 0x11}], 0x8008, 0x0) 16:14:29 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0xc8001) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000080)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) r3 = shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 982.576753] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:30 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0xc8001) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000080)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) r3 = shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 983.075174] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 983.267218] IPVS: ftp: loaded support on port[0] = 21 [ 983.730201] chnl_net:caif_netlink_parms(): no params data found [ 983.936115] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.942661] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.949678] device bridge_slave_0 entered promiscuous mode [ 983.981074] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.987686] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.995364] device bridge_slave_1 entered promiscuous mode [ 984.089585] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 984.122589] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 984.215704] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 984.223462] team0: Port device team_slave_0 added [ 984.253594] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 984.260734] team0: Port device team_slave_1 added [ 984.291341] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 984.323977] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 984.438169] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 984.471066] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 984.787137] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 985.893049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.998358] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 986.103921] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 986.110060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 986.119451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 986.220733] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 986.227032] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.331685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 986.339130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 986.347677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 986.355733] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.362192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.369753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 986.463667] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 986.470705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 986.480581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 986.488681] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.495099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.593685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 986.600543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 986.707581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 986.714676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 986.819983] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 986.827057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 986.837043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 986.845429] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 986.940975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 986.948343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 986.958015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 987.060893] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 987.067768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 987.076910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 987.185632] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 987.192971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 987.201176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 987.809676] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 988.085363] 8021q: adding VLAN 0 to HW filter on device batadv0 16:14:36 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100), 0x4) dup2(r2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000140)=0xc) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x11, 0x3) 16:14:36 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174080204010002", 0x11}], 0x8008, 0x0) 16:14:36 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0xc8001) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000080)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) r3 = shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='wlan1em0\\(mime_typewlan0ppp1ppp1proc[)}cpusetvboxnet1securityppp1self\x00') userfaultfd(0x80000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 989.068013] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:36 executing program 2: 16:14:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174230204010002", 0x11}], 0x8008, 0x0) 16:14:36 executing program 5: 16:14:36 executing program 2: [ 989.278802] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 989.365827] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:36 executing program 2: 16:14:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 989.546458] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:37 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:37 executing program 5: 16:14:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e6661747a0204010002", 0x11}], 0x8008, 0x0) 16:14:37 executing program 2: 16:14:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:37 executing program 5: 16:14:37 executing program 2: [ 989.946670] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:37 executing program 5: 16:14:37 executing program 2: 16:14:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174020204010002", 0x11}], 0x8008, 0x0) [ 990.170497] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:38 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x3f00}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:38 executing program 5: 16:14:38 executing program 2: 16:14:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174480204010002", 0x11}], 0x8008, 0x0) 16:14:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 990.897280] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:38 executing program 2: 16:14:38 executing program 5: fchdir(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r3 = shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r3) 16:14:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000704010002", 0x11}], 0x8008, 0x0) 16:14:38 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080), 0xe) listen(0xffffffffffffffff, 0x0) [ 991.229563] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:38 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080), 0xe) listen(r0, 0x0) 16:14:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000a04010002", 0x11}], 0x8008, 0x0) 16:14:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:39 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:39 executing program 5: fchdir(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r3 = shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r3) [ 991.905594] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e6661740a0204010002", 0x11}], 0x8008, 0x0) 16:14:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174060204010002", 0x11}], 0x8008, 0x0) 16:14:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174090204010002", 0x11}], 0x8008, 0x0) 16:14:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:39 executing program 5: fchdir(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r3 = shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r3) [ 992.969280] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:40 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174050204010002", 0x11}], 0x8008, 0x0) 16:14:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:40 executing program 5: fchdir(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r3 = shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r3) 16:14:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:40 executing program 2: fchdir(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r3 = shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r3) 16:14:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000504010002", 0x11}], 0x8008, 0x0) 16:14:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174038504010002", 0x11}], 0x8008, 0x0) 16:14:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:41 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3b1c, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:14:41 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174680204010002", 0x11}], 0x8008, 0x0) 16:14:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:41 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3b1c, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 994.271148] validate_nla: 4 callbacks suppressed [ 994.271158] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 994.534193] IPVS: ftp: loaded support on port[0] = 21 [ 995.169633] chnl_net:caif_netlink_parms(): no params data found [ 995.419093] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.425796] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.433823] device bridge_slave_0 entered promiscuous mode [ 995.464303] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.470722] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.481637] device bridge_slave_1 entered promiscuous mode [ 995.573808] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 995.611197] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 995.704727] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 995.712225] team0: Port device team_slave_0 added [ 995.742986] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 995.750176] team0: Port device team_slave_1 added [ 995.780655] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 995.814716] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 995.930862] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 995.961458] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 996.275950] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 997.396901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.510857] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 997.618160] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 997.624633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 997.631848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 997.737707] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 997.743971] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.851562] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 997.858714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 997.870420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 997.878507] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.884930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.892841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 997.990554] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 997.997677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 998.005789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 998.013659] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.020010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.122305] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 998.129146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 998.238568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 998.245633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 998.358861] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 998.365849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 998.374040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 998.390225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 998.492767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 998.499723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 998.508935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 998.612883] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 998.619700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 998.628584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 998.737675] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 998.745882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 998.754018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 999.386437] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 999.629905] 8021q: adding VLAN 0 to HW filter on device batadv0 16:14:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174001004010002", 0x11}], 0x8008, 0x0) 16:14:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x600000000000000, [0x277], [0xc2]}) 16:14:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3b1c, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:14:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:47 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 999.928678] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000304010002", 0x11}], 0x8008, 0x0) 16:14:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3b1c, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1000.213925] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:47 executing program 2: r0 = syz_open_dev$audion(0x0, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700), 0x1000000000000073) 16:14:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd201000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000a04010002", 0x11}], 0x8008, 0x0) [ 1000.442745] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000504010002", 0x11}], 0x8008, 0x0) 16:14:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3b1c, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) [ 1000.708899] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:48 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000404010002", 0x11}], 0x8008, 0x0) 16:14:48 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3b1c, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) 16:14:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) [ 1001.063201] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174001404010002", 0x11}], 0x8008, 0x0) 16:14:48 executing program 2: r0 = syz_open_dev$audion(0x0, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700), 0x1000000000000073) 16:14:48 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3b1c, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) [ 1001.404705] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000704010002", 0x11}], 0x8008, 0x0) 16:14:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3b1c, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 16:14:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 1001.863796] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020a010002", 0x11}], 0x8008, 0x0) 16:14:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r4, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) bind$pptp(r2, 0x0, 0xfffffcd9) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:49 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x16e}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3b1c, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 16:14:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) [ 1002.181258] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3b1c, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 16:14:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000212010002", 0x11}], 0x8008, 0x0) [ 1002.537581] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) 16:14:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000206010002", 0x11}], 0x8008, 0x0) 16:14:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3b1c, 0x0) r1 = dup2(r0, r0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1002.765512] netlink: 'syz-executor4': attribute type 16 has an invalid length. 16:14:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000001c0)={0x3, r3, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:50 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x6e01000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 16:14:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000203010002", 0x11}], 0x8008, 0x0) 16:14:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3b1c, 0x0) r1 = dup2(r0, r0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:14:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000001c0)={0x3, r3, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:50 executing program 2: perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 16:14:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3b1c, 0x0) r1 = dup2(r0, r0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:14:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:50 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mkdir(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) umount2(&(0x7f00000004c0)='./file0\x00', 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) 16:14:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000210010002", 0x11}], 0x8008, 0x0) 16:14:51 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3b1c, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 16:14:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000214010002", 0x11}], 0x8008, 0x0) 16:14:51 executing program 2: r0 = socket(0x10, 0x20000000080003, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0x1, 0x4) 16:14:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb2]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000001c0)={0x3, r3, 0x1}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) 16:14:51 executing program 2: 16:14:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204000002", 0x11}], 0x8008, 0x0) 16:14:51 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 16:14:51 executing program 2: 16:14:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 1004.713703] device bridge_slave_1 left promiscuous mode [ 1004.719801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.813122] device bridge_slave_0 left promiscuous mode [ 1004.818643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.065193] team0 (unregistering): Port device team_slave_1 removed [ 1005.079188] team0 (unregistering): Port device team_slave_0 removed [ 1005.094581] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1005.140083] bond0 (unregistering): Releasing backup interface bond_slave_0 16:14:52 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:52 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x3b1c, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:14:52 executing program 2: 16:14:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 16:14:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000205010002", 0x11}], 0x8008, 0x0) [ 1005.271386] bond0 (unregistering): Released all slaves [ 1005.393780] validate_nla: 5 callbacks suppressed [ 1005.393790] netlink: 'syz-executor4': attribute type 16 has an invalid length. [ 1005.512750] WARNING: CPU: 0 PID: 28 at net/batman-adv/multicast.c:371 batadv_mcast_mla_update+0x248f/0x2da0 [ 1005.522991] Kernel panic - not syncing: panic_on_warn set ... [ 1005.528887] CPU: 0 PID: 28 Comm: kworker/u4:2 Not tainted 4.20.0-rc7-next-20181224 #189 [ 1005.537029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1005.546430] Workqueue: bat_events batadv_mcast_mla_update [ 1005.551970] Call Trace: [ 1005.554570] dump_stack+0x1d3/0x2c6 [ 1005.558213] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1005.563428] panic+0x2ad/0x632 [ 1005.566655] ? add_taint.cold.5+0x16/0x16 [ 1005.570821] ? __warn.cold.8+0x5/0x4f [ 1005.574650] ? __warn+0xe8/0x1d0 [ 1005.578038] ? batadv_mcast_mla_update+0x248f/0x2da0 [ 1005.583152] __warn.cold.8+0x20/0x4f [ 1005.586879] ? rcu_softirq_qs+0x20/0x20 [ 1005.590871] ? batadv_mcast_mla_update+0x248f/0x2da0 [ 1005.595993] report_bug+0x254/0x2d0 [ 1005.599651] do_error_trap+0x11b/0x200 [ 1005.603557] do_invalid_op+0x36/0x40 [ 1005.607296] ? batadv_mcast_mla_update+0x248f/0x2da0 [ 1005.612410] invalid_op+0x14/0x20 [ 1005.615877] RIP: 0010:batadv_mcast_mla_update+0x248f/0x2da0 [ 1005.621597] Code: 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df be f8 f8 ff ff 66 41 89 34 06 48 c1 ea 03 c6 04 02 f8 e9 f7 e7 ff ff e8 11 b8 bb f9 <0f> 0b e9 b8 e3 ff ff 48 8b bd 48 fc ff ff e8 3e f3 ff f9 e9 99 df [ 1005.640545] RSP: 0018:ffff8880a9607338 EFLAGS: 00010293 [ 1005.645913] RAX: ffff8880a95ae000 RBX: 0000000000000001 RCX: ffffffff87c61e05 [ 1005.653187] RDX: 0000000000000000 RSI: ffffffff87c63a4f RDI: 0000000000000007 [ 1005.660464] RBP: ffff8880a9607738 R08: ffff8880a95ae000 R09: 0000000000000006 [ 1005.667741] R10: 0000000000000000 R11: ffff8880a95ae000 R12: ffff8880a9607490 [ 1005.675016] R13: 0000000000000000 R14: 1ffff110152c0e92 R15: ffff8880a9607710 [ 1005.682311] ? batadv_mcast_mla_update+0x845/0x2da0 [ 1005.687337] ? batadv_mcast_mla_update+0x248f/0x2da0 [ 1005.692457] ? batadv_mcast_mla_update+0x248f/0x2da0 [ 1005.697584] ? batadv_mcast_tvlv_ogm_handler+0x210/0x210 [ 1005.703057] ? trace_hardirqs_on+0x310/0x310 [ 1005.707478] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1005.713027] ? graph_lock+0x270/0x270 [ 1005.716841] ? __lock_is_held+0xb5/0x140 [ 1005.720917] ? graph_lock+0x270/0x270 [ 1005.724745] ? debug_object_deactivate+0x37d/0x480 [ 1005.729687] ? lock_downgrade+0x900/0x900 [ 1005.733852] ? find_held_lock+0x36/0x1c0 [ 1005.737954] ? graph_lock+0x270/0x270 [ 1005.741772] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1005.747335] ? check_preemption_disabled+0x48/0x280 [ 1005.752364] ? __lock_is_held+0xb5/0x140 [ 1005.756448] process_one_work+0xc90/0x1c40 [ 1005.760688] ? mark_held_locks+0x130/0x130 [ 1005.764940] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 1005.769641] ? __switch_to_asm+0x34/0x70 [ 1005.773713] ? __switch_to_asm+0x34/0x70 [ 1005.777782] ? __switch_to_asm+0x40/0x70 [ 1005.781855] ? __switch_to_asm+0x34/0x70 [ 1005.785929] ? __switch_to_asm+0x40/0x70 [ 1005.790015] ? __switch_to_asm+0x34/0x70 [ 1005.794640] ? __switch_to_asm+0x34/0x70 [ 1005.798724] ? __switch_to_asm+0x40/0x70 [ 1005.802808] ? __switch_to_asm+0x34/0x70 [ 1005.806880] ? __switch_to_asm+0x40/0x70 [ 1005.810952] ? __switch_to_asm+0x34/0x70 [ 1005.815023] ? __switch_to_asm+0x40/0x70 [ 1005.819111] ? __switch_to_asm+0x34/0x70 [ 1005.823280] ? __sched_text_start+0x8/0x8 [ 1005.827427] ? graph_lock+0x270/0x270 [ 1005.831250] ? __sched_text_start+0x8/0x8 [ 1005.835410] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1005.840975] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1005.845574] ? find_held_lock+0x36/0x1c0 [ 1005.849663] ? lock_acquire+0x1ed/0x520 [ 1005.853663] ? worker_thread+0x3e0/0x1390 [ 1005.857824] ? kasan_check_write+0x14/0x20 [ 1005.858770] IPVS: ftp: loaded support on port[0] = 21 [ 1005.862061] ? do_raw_spin_lock+0x14f/0x350 [ 1005.862080] ? __schedule+0x1ed0/0x1ed0 [ 1005.862096] ? rwlock_bug.part.2+0x90/0x90 [ 1005.862110] ? trace_hardirqs_on+0x310/0x310 [ 1005.862142] worker_thread+0x17f/0x1390 [ 1005.872428] kobject: 'lo' (0000000017cae163): kobject_add_internal: parent: 'net', set: 'devices' [ 1005.875643] ? __bpf_trace_sched_wake_idle_without_ipi+0x10/0x10 [ 1005.875669] ? process_one_work+0x1c40/0x1c40 [ 1005.875686] ? __schedule+0x9e6/0x1ed0 [ 1005.881360] kobject: 'lo' (0000000017cae163): kobject_uevent_env [ 1005.884547] ? __sched_text_start+0x8/0x8 [ 1005.884562] ? __sched_text_start+0x8/0x8 [ 1005.884597] ? __kthread_parkme+0xce/0x1a0 [ 1005.884634] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1005.888675] kobject: 'lo' (0000000017cae163): fill_kobj_path: path = '/devices/virtual/net/lo' [ 1005.897622] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1005.897644] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1005.897664] ? trace_hardirqs_on+0xbd/0x310 [ 1005.903989] kobject: 'queues' (00000000449f3ce7): kobject_add_internal: parent: 'lo', set: '' [ 1005.908289] ? kasan_check_read+0x11/0x20 [ 1005.913288] kobject: 'queues' (00000000449f3ce7): kobject_uevent_env [ 1005.918295] ? __kthread_parkme+0xce/0x1a0 [ 1005.922672] kobject: 'queues' (00000000449f3ce7): kobject_uevent_env: filter function caused the event to drop! [ 1005.926610] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1005.930849] kobject: 'rx-0' (00000000cf630f12): kobject_add_internal: parent: 'queues', set: 'queues' [ 1005.935921] ? __schedule+0x1ed0/0x1ed0 [ 1005.935946] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1005.935961] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1005.935974] ? __kthread_parkme+0xfb/0x1a0 [ 1005.935994] ? process_one_work+0x1c40/0x1c40 [ 1005.936008] kthread+0x35a/0x440 [ 1005.945065] kobject: 'rx-0' (00000000cf630f12): kobject_uevent_env [ 1005.949840] ? kthread_bind+0x40/0x40 [ 1005.954566] kobject: 'rx-0' (00000000cf630f12): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0' [ 1005.958719] ret_from_fork+0x3a/0x50 [ 1005.968162] kobject: 'tx-0' (00000000e095cdaf): kobject_add_internal: parent: 'queues', set: 'queues' [ 1005.979563] Kernel Offset: disabled [ 1006.072001] Rebooting in 86400 seconds..